Hi,
http.time is calculated by Wireshark.
Can tshark calculate http.time? I mean a command like "tshark -r test.pcap -T fields -e http.time > test.pcap.tshark.txt" I need to use tshark and calculate http.time using tshark.
Best regards, Babak
Closed for the following reason "the question is answered, right answer was accepted" by Babak 2018-11-30 15:41:10 +0000
An example of a command to use to calculate http.time with TShark is
tshark -r test.pcap -T fields -e http.time > test.pcap.tshark.txt
:-)
(It's calculated by the HTTP dissector in libwireshark, which is used both by Wireshark and TShark to dissect packets.)
It does not work.
tshark -r test.pcap -T fields -e http.time > test.pcap.tshark.txt
This command works in Windows, but it does not work in Linux. Why? Do you have any idea?
I updated my tshark in Linux to 2.2.5 and it is fine. I do not have any problem for calculating http.time in Linux.
Comments