Wireshark · Wireshark-dev: Re: [Wireshark-dev] Connection Information using tshark

[marco@xxxxxxxxxxxxxxxxxxx]

On Wed, 14 Mar 2012 05:10:18 -0400, Maverick wrote:

> Can someone please help me with getting connection information for
> each ip using tshark.Information such as
>
> When the connection was established, when it was terminated, how many
> bytes were transmitted. Is it possible to get this information for
> each ip in your trace file.

I'd look at tcptrace (http://www.tcptrace.org) for that.

                 Regards,

                       Marco.