hey experts, i used tshark and applied a filter to the pcap file .and then used capinfos utility capinfos -c -s pcapfiledirectory and found the output(no of packets and file size) .but the file size in not matching with that of the value i found using the same pcap in wireshark GUI ,applying same filter.then summary>statistics .but ,the values are not matching. please can anyone tell me what is the problem asked 24 Apr '12, 02:37  sangmeshp edited 24 Apr '12, 02:46 |
2 Answers:
This sounds more like an issue for the bug tracker if there is a mismatch you cannot explain. I doubt someone here will be able to understand your problem without trying to reproduce it, and that again is most likely not going to happen. My advice: if you think you found something that is not working correctly (and you want it to), do a detailed step-by-step documentation how you did what you did, and open a bug in bugzilla. answered 24 Apr '12, 05:19  Jasper ♦♦ |
Hello, I am not sure what you actually mean here, I had a check on this on few set of captures with -c and -s and got correct info. Could you please share the capture if you have one handy. I am sure it will be really interesting to see and dig further by adding few debug on how pkts are counted. As Jasper suggested, please log a defect if you can re-create this. Regards, -Deepak answered 24 Apr '12, 10:08  Deepak |
