Ask Your Question

[email protected]'s profile - activity

2021-06-24 03:13:37 +0000 received badge  Popular Question (source)
2020-04-06 07:17:56 +0000 received badge  Notable Question (source)
2020-04-06 07:17:56 +0000 received badge  Popular Question (source)
2019-04-13 18:13:27 +0000 commented answer geo locate tshark ip address

Hi. I'm new to tshark. How do I look at bug 14691? What did you discover in 14691? I tested: tshark -r test.pcap -T fie

2019-04-13 17:53:17 +0000 commented answer geo locate tshark ip address

Hi. I tested: tshark -r test.pcap -T fields -E header=y -E separator=, -e ip.src -e ip.geoip.src_country ...the command

2019-04-12 16:58:18 +0000 commented answer geo locate tshark ip address

I will try with your "complete" example as you typed it. No reason why it shouldn't work.

2019-04-12 16:32:25 +0000 commented answer geo locate tshark ip address

Hi. Thank you for your comments. I have been using your example: tshark -r file.pcap - T fields -E separator=... and it

2019-04-11 18:25:14 +0000 asked a question geo locate tshark ip address

geo locate tshark ip address Once I have redirected a tshark file to Excel, is there a way to - geographically by countr

2019-04-11 17:37:02 +0000 commented question tshark conversation output lopsided

Will search. Thank you for your support !!!

2019-04-11 17:28:05 +0000 received badge  Commentator
2019-04-11 17:28:05 +0000 commented question tshark conversation output lopsided

Hi Grahamb. Hope you have time for a question. Regarding the file I was reading...the basis of my questions...I think th

2019-04-09 16:39:01 +0000 commented question tshark conversation output lopsided

Hi. Are you able to run the conv,udp command in version 3.0.0 of tshark. This would help me determine what is wrong with

2019-04-08 15:43:08 +0000 asked a question tshark conversation conv command

tshark conversation conv command Does anyone have tshark version 3.0.0. I am reading an old capture file: tshark -r file

2019-04-08 15:22:22 +0000 commented question tshark conversation output lopsided

seems this medium is not set up to accept what I tried to type. I typed two lines which show the "lopsidedness" with 0 b

2019-04-08 15:17:18 +0000 commented question tshark conversation output lopsided

I see that it works for you. I'm using tshark version 3.0.0 so the output displays a bit different. Here are a couple of

2019-04-08 14:05:00 +0000 commented question tshark conversation output lopsided

Thank you Grahamb. I am just reading(-r) an old capture file. The info that I need is bytes sent vs bytes returned in co

2019-04-07 21:21:34 +0000 asked a question tshark conversation output lopsided

tshark conversation output lopsided I am entering: tshark -r file.pcap -q -z conv,udp. Regardless of how long I let the

2019-04-07 21:04:40 +0000 commented question tshark udp conversation command

I realized that the ip addresses differ slightly; so they are not repeated.

2019-04-07 17:54:51 +0000 asked a question tshark udp conversation command

tshark conversation command I am running: tshark -r file.pcap -q -z conv,udp. However, I get repeated conversations betw

2019-04-06 15:40:04 +0000 commented answer how do I filter conversation -conv- command in Tshark version 3.0.0

Thank you for responding to my question. Please test udp on your end and tell what you get. I'm entering: tshark -r file

2019-04-04 18:13:51 +0000 edited question how do I filter conversation -conv- command in Tshark version 3.0.0

how do I filter conversation -conv- command any way of filtering out the "Relative Start" and "Duration" fields in the c

2019-04-04 18:12:58 +0000 edited question how do I filter conversation -conv- command in Tshark version 3.0.0

how do I filter conversation -conv- command any way of filtering out the "Relative Start" and "Duration" fields in the c

2019-04-04 18:08:37 +0000 received badge  Editor (source)
2019-04-04 18:08:37 +0000 edited question how do I filter conversation -conv- command in Tshark version 3.0.0

how do I filter conversation -conv- command any way of filtering out the "Relative Start" and "Duration" fields in the c

2019-04-04 18:03:29 +0000 asked a question how do I filter conversation -conv- command in Tshark version 3.0.0

how do I filter conversation -conv- command any way of filtering out the "Relative Start" and "Duration" fields in the c

2019-04-03 14:31:49 +0000 commented answer -z conv,ip just reads my file frame by frame with tshark version 3.0.0

you asked in what context I am using the conv command. I need to detect amplification which is when an attacker spoofs i

2019-04-02 19:49:32 +0000 commented answer -z conv,ip just reads my file frame by frame with tshark version 3.0.0

thank you for responding. It worked just as you pointed out: tshark -r cap.pcapng -q -z conv,ip. I thought I had tried t

2019-04-02 19:48:38 +0000 received badge  Rapid Responder (source)
2019-04-02 19:48:38 +0000 answered a question -z conv,ip just reads my file frame by frame with tshark version 3.0.0

thank you for responding. It worked just as you pointed out: tshark -r cap.pcapng -q -z conv,ip. I thought I had tried t

2019-04-02 14:44:13 +0000 commented answer -z conv,ip just reads my file frame by frame with tshark version 3.0.0

Thanks for your response. -q does not work in this context. Actually, there shouldn't be a need for any additional comma

2019-04-02 14:44:02 +0000 commented question -z conv,ip just reads my file frame by frame with tshark version 3.0.0

Thanks for your response. -q does not work in this context. Actually, there shouldn't be a need for any additional comma

2019-04-01 19:12:05 +0000 asked a question why is -z conv,ip just reading my file frame by frame with tshark v3.0.0

why is -z conv,ip just reading my file frame by frame with tshark v3.0.0 with version 3.0.0 tshark should sort and produ

2019-04-01 19:12:04 +0000 asked a question -z conv,ip just reads my file frame by frame with tshark version 3.0.0

-z conv,ip just reads my file frame by frame with tshark version 3.0.0 -z conv,ip should or -z conv,udp should sort and