This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi Experts,

Is there any way to use tshark to produce the conversation list and the payload length for the conversations?

When I click on Statistics-> Conversations, I can't find the payload length (minus headers). I can find payload length by specifying a field in tshark.

My question is can I combine tshark to do something like this below:

tshark -r test.pcap -T fields -e tcp.len -q -z conv, tcp

asked 19 Sep '16, 20:59

Rsharkz's gravatar image

Rsharkz
5223
accept rate: 0%

Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×86
×34

question asked: 19 Sep '16, 20:59

question was seen: 1,075 times

last updated: 19 Sep '16, 20:59

p​o​w​e​r​e​d by O​S​Q​A