This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

capinfos file size and summary statistics file size not matching

0

hey experts,

i used tshark and applied a filter to the pcap file .and then used capinfos utility capinfos -c -s pcapfiledirectory and found the output(no of packets and file size) .but the file size in not matching with that of the value i found using the same pcap in wireshark GUI ,applying same filter.then summary>statistics .but ,the values are not matching.

please can anyone tell me what is the problem

asked 24 Apr '12, 02:37

sangmeshp's gravatar image

sangmeshp
367811
accept rate: 0%

edited 24 Apr '12, 02:46


2 Answers:

1

This sounds more like an issue for the bug tracker if there is a mismatch you cannot explain. I doubt someone here will be able to understand your problem without trying to reproduce it, and that again is most likely not going to happen.

My advice: if you think you found something that is not working correctly (and you want it to), do a detailed step-by-step documentation how you did what you did, and open a bug in bugzilla.

answered 24 Apr '12, 05:19

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

0

Hello,

I am not sure what you actually mean here, I had a check on this on few set of captures with -c and -s and got correct info.

Could you please share the capture if you have one handy. I am sure it will be really interesting to see and dig further by adding few debug on how pkts are counted.

As Jasper suggested, please log a defect if you can re-create this.

Regards,

-Deepak

answered 24 Apr '12, 10:08

Deepak's gravatar image

Deepak
31225
accept rate: 25%