I want to apply a filter so i can search for packets with certain cumulative bytes. I know how to add a column with this information (preference-> columns) but I don't know what is the command for the filter. For example I want to know all the packets that have more than x cumulative bytes. A filter that I can use like a frame.time_relative filter.
The point is that this must be a filter, not a graphic method, because later on I will need to implement this in a perl script (so i will have to use tshark) and extract those informations to a file (i.e. -e frame.time_relative or -e rtp.seq).
asked 10 Jul '14, 04:38