This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Tshark -numbering of packets

0

When I run tshark in this way in Ubuntu then I do not get the packet numbers:

tshark -Nt -f "host abc.com"
tshark: Lua: Error during loading:
[string "/usr/share/wireshark/init.lua"]:45: dofile has been disabled
Running as user "root" and group "root". This could be dangerous.
Capturing on eth0

0.000000 10.0.2.15 -> 92.223.112.104 TCP 74 49224 > https [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=463966 TSecr=0 WS=128 0.019933 92.223.112.104 -> 10.0.2.15 TCP 60 https > 49224 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 0.020102 10.0.2.15 -> 92.223.112.104 TCP 54 49224 > https [ACK] Seq=1 Ack=1 Win=14600 Len=0

but in Windows I would get

1 0.000000    10.0.2.15 -> 92.223.112.104 TCP 74 49224 > https [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=463966 TSecr=0 WS=128
2 0.019933 92.223.112.104 -> 10.0.2.15    TCP 60 https > 49224 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460
3 0.020102    10.0.2.15 -> 92.223.112.104 TCP 54 49224 > https [ACK] Seq=1 Ack=1 Win=14600 Len=0

how can I make the numbering of packet in Ubuntu?

asked 18 Dec ‘14, 06:35

regexmix's gravatar image

regexmix
11224
accept rate: 0%

edited 18 Dec ‘14, 06:40

I would gess that the version of Wireshark on Ubuntu is older and don’t have the feature. What versions do you have?

(18 Dec ‘14, 07:45) Anders ♦

TShark 1.6.7

wireshark 1.6.7

Ubuntu 12.04.5 LTS

(18 Dec ‘14, 07:57) regexmix