Wireshark · Wireshark-users: Re: [Wireshark-users] Packet length statistics with tshark

[Abhik Sarkar <sarkar.abhik@xxxxxxxxx>]

Hi Florent!

Yes it is possible... here's an example:
tshark -qz plen,tree -r mm1_mm1.cap

===================================================================
 Packet Lengths        value            rate         percent
-------------------------------------------------------------------
 Packet Lengths        2039       0.011131
  0-19                     0       0.000000           0.00%
  20-39                    0       0.000000           0.00%
  40-79                  990       0.005404          48.55%
  80-159                  21       0.000115           1.03%
  160-319                 57       0.000311           2.80%
  320-639                 73       0.000398           3.58%
  640-1279                22       0.000120           1.08%
  1280-2559              876       0.004782          42.96%
  2560-5119                0       0.000000           0.00%
  5120-                    0       0.000000           0.00%

===================================================================

Regards,
Abhik.

On Fri, Apr 10, 2009 at 2:30 PM, Florent Deybach <fdeybach@xxxxxxxxxxxxxx> wrote:

Hi,

Is there a way to use tshark with a pcap file to get the same
statistics as in Wireshark with the "Statistics -> Packet Length" ?

Many thanks,

Florent
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe