This is our old Q&A Site. Please post any new questions and answers at

Hi guys,

I got a problem with the info field.

I need to search for log files which contain :"Retransmission" in the info field in about 1k logs.
However, i already know that the frame doesnt contain the information "Retransmission".

Do you guys know any workaround to filter the log-files with the info field : [Retransmission] in any part of the logfile?

if you need any more information pls let me know.
thanks in advance.

asked 03 Sep '15, 02:20

schmiddi's gravatar image

accept rate: 0%

Nothing that can't be solved with a for loop :)

for file in *.pcap; do tshark -r $file -Y tcp.analysis.retransmission -w $file_ret.pcapng; done

permanent link

answered 03 Sep '15, 08:10

Roland's gravatar image

accept rate: 13%

edited 03 Sep '15, 08:47

wow , thx! it worked.

(04 Sep '15, 01:03) schmiddi
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 03 Sep '15, 02:20

question was seen: 973 times

last updated: 04 Sep '15, 06:56

p​o​w​e​r​e​d by O​S​Q​A