Revision history  [back]

I am running: tshark -r file.pcap -q -z conv,udp. However, I get repeated conversations between some ip address pairs(send/response), same port pair. Can someone test the udp command and tell me what you get. If you know of a better way please let me know.