I'm trying to find a way utilizing wireshark/tshark to provide me with the number of packets per channel seen in a given pcap file. I already know the long way (doing individual filters by channel), but I'm trying to find a faster process. I've looked through a lot of questions but I can't seem to find anyway to do this. I would be happy with just the raw numbers (I don't need no fancy graphs). Simply put; Given a .pcap file, how can I determine the number of packets seen per channel (1-14), in a single filter / more automated fashion? asked 28 Apr '14, 10:08  Kinmuan |
One Answer:
I assume you are talking about TCP conversations while you say: 'Channel'. If that is the case, you can see the frames per TCP connection by using the statistics functions.
and then check the columns Packets and/or Bytes. Regards answered 01 May '14, 16:44  Kurt Knochner ♦ |
Whats your definition of a "Channel"?