Comment # 2
on bug 11556
from [email protected]
Tried with later tshark version. Still see this issue:
$ tshark -v
TShark 1.12.7 (v1.12.7-0-g7fc8978 from master-1.12)
Copyright 1998-2015 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with GLib 2.36.0, with libpcap, with libz 1.2.3, without
POSIX
capabilities, with SMI 0.4.8, without c-ares, without ADNS, with Lua 5.2,
without Python, with GnuTLS 2.12.19, with Gcrypt 1.5.0, with MIT Kerberos, with
GeoIP.
Running on Mac OS X 10.9.5, build 13F34 (Darwin 13.4.0), with locale
en_US.UTF-8, with libpcap version 1.3.0 - Apple version 41, with libz 1.2.5.
Intel(R) Core(TM) i7-3615QM CPU @ 2.30GHz
Built using llvm-gcc 4.2.1 (Based on Apple Inc. build 5658) (LLVM build
2336.9.00).
$
$ tshark -r tshark123.cap -n -d udp.port==9999,cflow -R
"cflow.srcaddr==192.168.104.113 && cflow.dstaddr==192.168.106.11 " -2
1 165.140631000 10.146.100.213 -> 10.146.100.212 CFLOW 178 IPFIX flow (136
bytes)
2 165.140638000 10.146.100.213 -> 10.146.100.212 CFLOW 155 IPFIX flow (113
bytes)
$
$ tshark -r tshark123.cap -n -d udp.port==9999,cflow -Y
"cflow.srcaddr==192.168.104.113 && cflow.dstaddr==192.168.106.11 " -2
2980 164.819884000 10.146.109.218 -> 10.146.100.212 CFLOW 155 IPFIX flow (113
bytes)
2981 164.819887000 10.146.109.218 -> 10.146.100.212 CFLOW 178 IPFIX flow (136
bytes)
3028 165.140631000 10.146.100.213 -> 10.146.100.212 CFLOW 178 IPFIX flow (136
bytes)
3029 165.140638000 10.146.100.213 -> 10.146.100.212 CFLOW 155 IPFIX flow (113
bytes)
$
You are receiving this mail because:
- You are watching all bug changes.