Advertisement
Guest User

pcap tshark

a guest
Aug 26th, 2016
209
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 0.19 KB | None | 0 0
  1. for stream in `tshark -r 012987veronica.cap -T fields -e tcp.stream | sort -n | uniq`
  2. do
  3.     echo $stream
  4.     tshark -r 012987veronica.cap -w stream-$stream.cap -Y "tcp.stream==$stream"
  5.  
  6. done
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement