Wireshark-dev: Re: [Wireshark-dev] Connection Information using tshark

Date: Wed, 14 Mar 2012 10:18:04 +0100
On Wed, 14 Mar 2012 05:10:18 -0400, Maverick wrote:

Can someone please help me with getting connection information for
each ip using tshark.Information such as

When the connection was established, when it was terminated, how many
bytes were transmitted. Is it possible to get this information for
each ip in your trace file.

I'd look at tcptrace (http://www.tcptrace.org) for that.

                 Regards,

                       Marco.