This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Dropped packet stats in CLI during capture

0

For tcmdump or dumpcap, is it possible to have the dropped packets counter statistics during the capture? Currently only available at the end of the capture...

How can I know if my capture is missing packets in real-time?

Update: I've discovered that pressing CTRL+T (sending SIGINFO according to manpage) during a dumpcap -q capture, displays some info on demand, maybe could add afix to display dropped packets if the info is available:

load: 1.32  cmd: dumpcap 4451 running 0.04u 0.03s
Packets captured: 8

asked 26 Oct '16, 13:56

TomLaBaude's gravatar image

TomLaBaude
66171724
accept rate: 66%

edited 31 Oct '16, 14:53


One Answer:

-1

As an example:

tshark -i 1 -qz icmp,srt

This will show # of packets lost and also a % of packet loss.

hope this is helpful, John

answered 31 Oct '16, 13:06

John_Modlin's gravatar image

John_Modlin
1205
accept rate: 0%

All of this is available at the end of the capture, I was asking for packet drop info during the capture

(31 Oct '16, 14:50) TomLaBaude