This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Get Stream index for a given packet number

0

Hi, In wireshark is there a way to get Stream index if we give packet number? What I want is a stream index so I can feed the stream index and get the whole TCP Session data.

asked 25 Apr '16, 12:20

WSharkUser's gravatar image

WSharkUser
6●1●1●3
accept rate: 0%

One Answer:

2

yes, like this, e.g. for file "test.pcapng" and frame number 100:

tshark -r "test.pcapng" -Y "frame.number==100" -Tfields -e tcp.stream

answered 25 Apr '16, 12:48

Jasper's gravatar image

Jasper ♦♦
23.8k●5●51●284
accept rate: 18%

awesome. That worked like a charm. Thanks so much Jasper.

(25 Apr '16, 12:52) WSharkUser

If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.

(26 Apr '16, 00:43) Jaap ♦