When I run tshark in this way in Ubuntu then I do not get the packet numbers:
tshark -Nt -f "host abc.com"
tshark: Lua: Error during loading:
[string "/usr/share/wireshark/init.lua"]:45: dofile has been disabled
Running as user "root" and group "root". This could be dangerous.
Capturing on eth0
0.000000 10.0.2.15 -> 92.223.112.104 TCP 74 49224 > https [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=463966 TSecr=0 WS=128
0.019933 92.223.112.104 -> 10.0.2.15 TCP 60 https > 49224 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460
0.020102 10.0.2.15 -> 92.223.112.104 TCP 54 49224 > https [ACK] Seq=1 Ack=1 Win=14600 Len=0
but in Windows I would get
1 0.000000 10.0.2.15 -> 92.223.112.104 TCP 74 49224 > https [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=463966 TSecr=0 WS=128
2 0.019933 92.223.112.104 -> 10.0.2.15 TCP 60 https > 49224 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460
3 0.020102 10.0.2.15 -> 92.223.112.104 TCP 54 49224 > https [ACK] Seq=1 Ack=1 Win=14600 Len=0
how can I make the numbering of packet in Ubuntu?
asked 18 Dec ‘14, 06:35
regexmix
11●2●2●4
accept rate: 0%
I would gess that the version of Wireshark on Ubuntu is older and don’t have the feature. What versions do you have?
TShark 1.6.7
wireshark 1.6.7
Ubuntu 12.04.5 LTS