Ask Your Question

atchoubaka's profile - activity

2019-11-28 20:17:14 +0000 marked best answer Find in files

Greetings.

I have captured many files of 250MB each for days. Now I have a bit more than 4000 files.

I'd like to find the files where there is a specific flags (0x011). Is there an option where I can "find in files" an expression ?

It will be faster than oppening each file and check with the display filter.

For instance, Notepadd++ has this feature and it's very efficient.

Thanks for your help !

NB : for the next time, I'll set a better capture filter (I just found it). But for this time, I need to retrieve info from the files already cpatured.

2019-11-28 17:16:59 +0000 received badge  Rapid Responder
2019-11-28 17:16:59 +0000 answered a question Find in files

got it... I did not write -Y but -y. with -Y, works perfectly. tks

2019-11-28 17:12:57 +0000 commented answer Find in files

tshark: The specified data link type "tcp.flags == 0x011" isn't valid

2019-11-28 17:07:07 +0000 commented answer Find in files

tks. i'll try.

2019-11-28 15:59:39 +0000 commented question Find in files

Hi Graham, tks for your reply. flags = tcp.flags=0x011. if tshark can do this, perfect, what should be the command the

2019-11-28 15:25:37 +0000 asked a question Find in files

Find in files Greetings. I have captured many files of 250MB each for days. Now I have a bit more than 4000 files. I'

2019-11-28 15:22:51 +0000 asked a question Find in files

Find in files Greetings. I have captured many files of 250MB each for days. Now I have a bit more than 4000 files. I'd