Wireshark-users: Re: [Wireshark-users] print number of packet based on filter in a file

From: "j.snelders" <j.snelders@xxxxxxxxxx>
Date: Fri, 25 Sep 2009 19:32:32 +0200
Hi Manolis

Well, I'm afraid you have to create a script:
http://wiki.wireshark.org/KnownBugs/OutOfMemory
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1731


C:\Trace_files>tshark -r test.dump -R "megaco.command=="Add""
Unhandled exception (group=1, code=6)

This application has requested the Runtime to terminate it in an unusual
way.
Please contact the application's support team for more information.

BTW
File size test.dump: 3,35GB.

Cheers
Joan


On Fri, 25 Sep 2009 10:54:28 +0300 Manolis Katsidoniotis wrote:
>hi
>
>thanks,, it worked beautifully also with combinations
>
>another quicky
>in case you happen to have an opinion
>
>I have a huge amount of files of 80MB each and I wish to create total
>statistics about add/modify/... etc, etc,
>should I merge all files in one large (~*5GB*) file and then run tshark
>against it or should I create a batch script store the results in .csv and
>use Excel?
>
>
>br
>Manolis
>