Hello Is that possible to save only timestamp and TCP window size from a capture file (PCAP file)? How can I do it? asked 28 May '17, 07:00  foxmodem |
One Answer:
On a command line you can use tshark to do that for you, e.g. -TFields tells tshark to print field values, and the -e parameters specify the display filter name of the field you want. answered 28 May '17, 07:05  Jasper ♦♦ |
Thanks. I will try!
How can I plot a graphic of timestamp X TCP window size? Wireshark can do it?
Try Statistics - TCP Stream Graphs - Window Scaling