This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello.

I want to be able to generate an xml graph output like that generated in Wireshark using TShark. I don't need any filters for the moment, just the basic output. However I do need the graph to show time of day, and be in bits/second.

Can anyone offer any help?

asked 29 Nov '12, 07:02

chazzquire's gravatar image

chazzquire
6222
accept rate: 0%

can you please add some information about the xml graph output you are talking about (how do you generate it in Wireshark)?

(29 Nov '12, 07:04) Kurt Knochner ♦

I want an IO Graph, and in Wireshark I simply click copy to get the xml.

The format is:

"Interval start","Graph 1" "15:32:51","2259" "15:33:01","2926" "15:33:11","1756" "15:33:21","1655"

(29 Nov '12, 07:08) chazzquire

My sticking point is getting the output to show Time of day, rather than time since the start of capture.

(29 Nov '12, 07:17) chazzquire

My sticking point is getting the output to show Time of day, rather than time since the start of capture.

There is an option 'View as time of day' in the IO graphs. Did you try that?

UPDATE:

Sample with tshark:

tshark -q -nr input.cap -t ad -z io,stat,1,"AVG(frame.len)frame.len"

See the tshark man page for more information about io,stat

http://www.wireshark.org/docs/man-pages/tshark.html

Regards
Kurt

permanent link

answered 29 Nov '12, 07:39

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 29 Nov '12, 08:07

I am running this in tshark not wireshark

(29 Nov '12, 07:42) chazzquire

ah, right. Add the option -t ad to tshark. This works in the current version 1.8.x (possibly also with older versions). See UPDATE in my answer.

(29 Nov '12, 08:03) Kurt Knochner ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×832
×72

question asked: 29 Nov '12, 07:02

question was seen: 6,421 times

last updated: 29 Nov '12, 08:25

p​o​w​e​r​e​d by O​S​Q​A