Wireshark

  • Riverbed Technology
  • WinPcap
SHARKFEST '13 - Wireshark Developer and User Conference - June 16-19, 2013 - UC Berkeley
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: [Wireshark-users] Extracting the no. of ports in a pcap

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: NITIN GOYAL <nitinkumgoyal@xxxxxxxxx>
Date: Sat, 20 Aug 2011 11:11:24 +0530

Hi

I have a big pcap which i want to convert into pdml format. This pcap have multiple sessions on different ports on a combination of Src and Dst. IP.

Like 
10.x.x.x [port1]  172.0.0.1 [port y]
10.x.x.x [port2]  172.0.0.1 [port y]
10.x.x.x [port3]  172.0.0.1 [port y]
10.x.x.x [port4]  172.0.0.1 [port y]

Now, is there any way, i can get the numbers of ports and their list before i start making the pdml for each port. SO, i can call tshark.exe in a multi-threaded program which call multiple instances of tshark for different ports and i get multiple pdml files for multiple ports simultaneously.

Guys, can somebody give my any advice for the things explained above.

Thanks
Nitin
  • Follow-Ups:
    • Re: [Wireshark-users] Extracting the no. of ports in a pcap
      • From: j.snelders
  • Prev by Date: Re: [Wireshark-users] OID resolution
  • Next by Date: Re: [Wireshark-users] out of port numbers
  • Previous by thread: Re: [Wireshark-users] How to copy or store the contents from packet List window
  • Next by thread: Re: [Wireshark-users] Extracting the no. of ports in a pcap
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation