Wireshark · Wireshark-users: Re: [Wireshark-users] tshark conversatons

[Rikard Svenningsen <rikard.svenningsen@xxxxxxxxx>]

It depend  on what kind of "conversation" you are looking for, the suggestion you got is going to any one to and from the server.

If you are looking for conversation only to and from one point to another on tcp or udp  you will have to do it on another way.

2010/2/26 <fajfusio@xxxxx>

Hello

How can I print the list of conversations contained in a file.
E.g. I want to see conversations on a specific server port.
I try something like:

tshark -z conv,tcp,"tcp.port==139" -r file.pcap

Unfortunately it just prints the contents of a file.

thank you for help

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

--
Med venlig hilsen
Rikard Svenningsen
Smalager 36
DK-7120