This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi guys,

I got a problem with the info field.

I need to search for log files which contain :"Retransmission" in the info field in about 1k logs.
However, i already know that the frame doesnt contain the information "Retransmission".

Do you guys know any workaround to filter the log-files with the info field : [Retransmission] in any part of the logfile?

if you need any more information pls let me know.
thanks in advance.

asked 03 Sep '15, 02:20

schmiddi's gravatar image

schmiddi
6113
accept rate: 0%


Nothing that can't be solved with a for loop :)

for file in *.pcap; do tshark -r $file -Y tcp.analysis.retransmission -w $file_ret.pcapng; done

permanent link

answered 03 Sep '15, 08:10

Roland's gravatar image

Roland
7642415
accept rate: 13%

edited 03 Sep '15, 08:47

wow , thx! it worked.

(04 Sep '15, 01:03) schmiddi
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×33
×16
×1

question asked: 03 Sep '15, 02:20

question was seen: 881 times

last updated: 04 Sep '15, 06:56

p​o​w​e​r​e​d by O​S​Q​A