In Wireshark I can pull down Statistics and go to Conversation Lists / TCP and get a nice report with packet and byte counts, stations & ports as well as start times and durations. How can I get this same report from tshark? Using -z conv,tcp gets me some of it but not all. Plus, my captures are too big and Wireshark keeps bombing out. Thanks, Shae asked 11 Apr '11, 12:03  iamshae edited 11 Apr '11, 12:03 |
One Answer:
That's not possible at the moment. The code for the conversation statistics is not (yet) shared between wireshark and tshark. Hence the differences. answered 11 Apr '11, 12:52  SYN-bit ♦♦ |
