Questions tagged [tshark]
The tshark tag has no summary.
41 questions
0 votes
1 answer
85 views
Tshark grep specific fields
I'm using tshark to decode on the fly the SMPP protocol, e.g.: tshark -i any -V -Y smpp This will show, in real time, every single SMPP packet, e.g. Short Message Peer to Peer, Command: Submit_sm, ...
- 145
0 votes
0 answers
193 views
Load speed difference between Wireshark and tshark
I have some PCAP files from which I'm trying to extract metadata. I am doing this using tshark, opening the file, extracting a couple dozen fields, then writing the table to disk. I've noticed that ...
- 123
0 votes
2 answers
66 views
Pinging two PCs and trying to capture ICMPs with third PC
I have a setup of three computers that are all on the same subnet and connected to a switch. All services are reachable. I'm pinging from PC(1) to PC(2). Opening tshark with PC(3) but cannot see ...
- 83
1 vote
1 answer
185 views
GeoIP not working when processing PCAP with tshark as su
I am working with lots of PCAP files and trying to convert them into .tsv files for tabular analysis. So I'm using tshark in a Ubuntu 22 VirtualBox machine to dissect each packet. I have a bash ...
- 123
3 votes
1 answer
2k views
Capture DNS traffic to and from a network namespace using tshark
How can I capture traffic specifically from a network interface inside a network namespace using tshark? In my case, the network interface tun0 is moved into the network namespace called vpn. Normally ...
- 295
1 vote
0 answers
49 views
Unable to capture node-to-node traffic in a wireless access point
I have created a wireless access point on ubuntu and I have written a program that parses network traffic obtained via tshark and condenses it into a readable form. I am able to capture traffic going ...
5 votes
2 answers
3k views
How to display the interface name with tshark
I am using tshark to diagnose an asymetric route problem. I am filtering the traffic so only src/dest to a specific ip is being captured, but I would like to display a field that shows which interface ...
- 379
1 vote
1 answer
743 views
How to find min, max data rate of pcap file
I have pcap file and I want to find min and max data rate. I use Capinfos, it shows only average data rate. I would ask how to do that?
- 83