Packet length statistics with tshark

[Florent Deybach]

Hi,

Is there a way to use tshark with a pcap file to get the same
statistics as in Wireshark with the "Statistics -> Packet Length" ?

Many thanks,

Florent
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users-IZ8446WsY0/***@public.gmane.org>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request-IZ8446WsY0/***@public.gmane.org?subject=unsubscribe

[Abhik Sarkar]

Hi Florent!

Yes it is possible... here's an example:
tshark -qz plen,tree -r mm1_mm1.cap

===================================================================
Packet Lengths value rate percent
-------------------------------------------------------------------
Packet Lengths 2039 0.011131
0-19 0 0.000000 0.00%
20-39 0 0.000000 0.00%
40-79 990 0.005404 48.55%
80-159 21 0.000115 1.03%
160-319 57 0.000311 2.80%
320-639 73 0.000398 3.58%
640-1279 22 0.000120 1.08%
1280-2559 876 0.004782 42.96%
2560-5119 0 0.000000 0.00%
5120- 0 0.000000 0.00%

===================================================================

Regards,
Abhik.

Post by Florent Deybach
Hi,
Is there a way to use tshark with a pcap file to get the same
statistics as in Wireshark with the "Statistics -> Packet Length" ?
Many thanks,
Florent
___________________________________________________________________________
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
?subject=unsubscribe