This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Getting tshark to output reports seen in Wireshark?

0

In Wireshark I can pull down Statistics and go to Conversation Lists / TCP and get a nice report with packet and byte counts, stations & ports as well as start times and durations.

How can I get this same report from tshark? Using -z conv,tcp gets me some of it but not all.

Plus, my captures are too big and Wireshark keeps bombing out.

Thanks, Shae

asked 11 Apr '11, 12:03

iamshae's gravatar image

iamshae
1112
accept rate: 0%

edited 11 Apr '11, 12:03


One Answer:

0

That's not possible at the moment. The code for the conversation statistics is not (yet) shared between wireshark and tshark. Hence the differences.

answered 11 Apr '11, 12:52

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%