This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Parsing a PCAP-file with tshark and generate a custom graph with python + matplotlib is my normal usecase. But this time, the build-in IO-graph would fit my needs completely, if I can automate the process. I'd like to call the IO-graph standalone application with the specific PCAP-file, filters and so on. The expected output would be a PNG-file or similar.

Is it possible to use the IO-graph of wireshark as a standalone application from the commandline like tshark?What's the expected input dataset of the IO-graph?

asked 19 Apr '16, 09:10

oposum's gravatar image

oposum
11115
accept rate: 0%

edited 19 Apr '16, 09:11


Is it possible to use the IO-graph of wireshark as a standalone application from the commandline like tshark?

Not without a (larger) change of code. Sorry!

Alternatively you can use tshark -z io,stat, (see man page for details), but that won't generate PNG files. You can also use tshark to print frames or fields within frames and parse the output with python to generate input data for matplotlib, etc.

Instead of parsing the output of tshark, you can also check if Sharktools helps: https://github.com/armenb/sharktools

Regards
Kurt

permanent link

answered 19 Apr '16, 13:42

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 20 Apr '16, 02:21

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×19
×7
×6

question asked: 19 Apr '16, 09:10

question was seen: 1,464 times

last updated: 20 Apr '16, 02:21

p​o​w​e​r​e​d by O​S​Q​A