This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

hey experts,

i used tshark and applied a filter to the pcap file .and then used capinfos utility capinfos -c -s pcapfiledirectory and found the output(no of packets and file size) .but the file size in not matching with that of the value i found using the same pcap in wireshark GUI ,applying same filter.then summary>statistics .but ,the values are not matching.

please can anyone tell me what is the problem

asked 24 Apr '12, 02:37

sangmeshp's gravatar image

sangmeshp
367811
accept rate: 0%

edited 24 Apr '12, 02:46


This sounds more like an issue for the bug tracker if there is a mismatch you cannot explain. I doubt someone here will be able to understand your problem without trying to reproduce it, and that again is most likely not going to happen.

My advice: if you think you found something that is not working correctly (and you want it to), do a detailed step-by-step documentation how you did what you did, and open a bug in bugzilla.

permanent link

answered 24 Apr '12, 05:19

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Hello,

I am not sure what you actually mean here, I had a check on this on few set of captures with -c and -s and got correct info.

Could you please share the capture if you have one handy. I am sure it will be really interesting to see and dig further by adding few debug on how pkts are counted.

As Jasper suggested, please log a defect if you can re-create this.

Regards,

-Deepak

permanent link

answered 24 Apr '12, 10:08

Deepak's gravatar image

Deepak
31225
accept rate: 25%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×832
×91
×9
×7

question asked: 24 Apr '12, 02:37

question was seen: 3,457 times

last updated: 24 Apr '12, 10:08

p​o​w​e​r​e​d by O​S​Q​A