First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

I/O Graph on windows in Tshark

I want to get .csv files from I/O graphs for a large number of files .pcap, can I automate this with Thsark? I didn't find anything working under windows 10 on the Internet.

p4shark's avatar
3
p4shark
asked 2022-03-14 05:57:33 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Look at -z io,stat,interval[,filter][,filter][,filter]…​ in the tshark man page.
It's not CSV so the output will need to be reformatted.
(similar question asking for CSV output: How to convert TCP flows in .pcap file to .csv file)

$ tshark -r ./stream-0.pcap -z io,stat,1,"COUNT(frame)frame","COUNT(frame)tcp","COUNT(frame)http" -q

====================================
| IO Statistics                    |
|                                  |
| Duration: 5.300276 secs          |
| Interval: 1 secs                 |
|                                  |
| Col 1: COUNT(frame)frame         |
|     2: COUNT(frame)tcp           |
|     3: COUNT(frame)http          |
|----------------------------------|
|          |1      |2      |3      |
| Interval | COUNT | COUNT | COUNT |
|----------------------------------|
|  0 <> 1  |     8 |     8 |     2 |
|  1 <> 2  |     0 |     0 |     0 |
|  2 <> 3  |     0 |     0 |     0 |
|  3 <> 4  |     0 |     0 |     0 |
|  4 <> 5  |     0 |     0 |     0 |
|  5 <> Dur|     4 |     4 |     0 |
====================================
$
Chuckc's avatar
3k
Chuckc
answered 2022-03-14 15:49:08 +0000, updated 2022-03-14 15:49:50 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer