ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: [Wireshark-users] Question about endpoints statistics

From: "Martin Riegel" <riegel@xxxxxxxxxxxx>
Date: Sat, 25 Nov 2006 16:21:08 +0100
Hi

I've tried the Windows version of Wireshark and the endpoints list
statistics
(http://www.wireshark.org/docs/wsug_html_chunked/ChStatEndpoints.html#ChStat
EndpointDefinition), which works great. 

Because I needed to process some huge traces, I had to install Wireshark on
a terminal based Linux computer which is faster. This works fine, but since
I've now lost the GUI I can't use the endpoints windows described in the URL
mentioned earlier. 

Tshark offers statistics via the -z switch, but the closest I've gotten to
the endpoint statistics is the IP conversation statistics (-z conv,ip -q).

So my question is if it's possible to generate endpoints list statistics
with tshark (or some of the other included programs) in terminal mode?

Thanks!

Best regards
Martin Riegel
riegel@xxxxxxxxxxxx