Wireshark-bugs: [Wireshark-bugs] [Bug 11556] TShark does not display all packets even when they
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 30 Sep 2015 18:21:46 +0000

Comment # 2 on bug 11556 from 
Tried with later tshark version. Still see this issue:

$ tshark -v
TShark 1.12.7 (v1.12.7-0-g7fc8978 from master-1.12)

Copyright 1998-2015 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GLib 2.36.0, with libpcap, with libz 1.2.3, without
POSIX
capabilities, with SMI 0.4.8, without c-ares, without ADNS, with Lua 5.2,
without Python, with GnuTLS 2.12.19, with Gcrypt 1.5.0, with MIT Kerberos, with
GeoIP.

Running on Mac OS X 10.9.5, build 13F34 (Darwin 13.4.0), with locale
en_US.UTF-8, with libpcap version 1.3.0 - Apple version 41, with libz 1.2.5.
      Intel(R) Core(TM) i7-3615QM CPU @ 2.30GHz

Built using llvm-gcc 4.2.1 (Based on Apple Inc. build 5658) (LLVM build
2336.9.00).
$
$ tshark -r tshark123.cap -n -d udp.port==9999,cflow -R
"cflow.srcaddr==192.168.104.113 && cflow.dstaddr==192.168.106.11 " -2
  1 165.140631000 10.146.100.213 -> 10.146.100.212 CFLOW 178 IPFIX flow (136
bytes)
  2 165.140638000 10.146.100.213 -> 10.146.100.212 CFLOW 155 IPFIX flow (113
bytes)
$
$ tshark -r tshark123.cap -n -d udp.port==9999,cflow -Y
"cflow.srcaddr==192.168.104.113 && cflow.dstaddr==192.168.106.11 " -2
2980 164.819884000 10.146.109.218 -> 10.146.100.212 CFLOW 155 IPFIX flow (113
bytes)
2981 164.819887000 10.146.109.218 -> 10.146.100.212 CFLOW 178 IPFIX flow (136
bytes)
3028 165.140631000 10.146.100.213 -> 10.146.100.212 CFLOW 178 IPFIX flow (136
bytes)
3029 165.140638000 10.146.100.213 -> 10.146.100.212 CFLOW 155 IPFIX flow (113
bytes)
$

You are receiving this mail because:
  • You are watching all bug changes.