2016年12月2日 星期五

Wireshark and tshark Examples on Windows and Linux

Python
import datetime
a = datetime.timedelta(seconds=25293)
str(a)
'7:01:33'
b = datetime.timedelta(seconds=25464)
str(b)
'7:04:24'


Linux

tshark -r PM.pcap -Y '(frame.time >= "Nov 30, 2016 07:01:33") && (frame.time <= "Nov 30, 2016 7:04:24")' -w out.pcap

[quantprod@hkoffice083 trial]$ capinfos PM.pcap
File name:           PM.pcap
File type:           Wireshark/tcpdump/... - pcap
File encapsulation:  Ethernet
Packet size limit:   file hdr: 65535 bytes
Number of packets:   3,096 k
File size:           2,492 MB
Data size:           2,443 MB
Capture duration:    15142 seconds
Start time:          Wed Nov 30 05:21:56 2016
End time:            Wed Nov 30 09:34:18 2016
Data byte rate:      161 kBps
Data bit rate:       1,290 kbps
Average packet size: 789.02 bytes
Average packet rate: 204 packets/sec
SHA1:                6238971ac36f2bfb990668f3889e61ec26c3769c
RIPEMD160:           689c0dbe61c95d14882d631b76d0afe3f0a3b10c
MD5:                 9cc626ffc7314bc8a9f4f5e03c81ff5d
Strict time order:   True


沒有留言:

張貼留言

2023 Promox on Morefine N6000 16GB 512GB

2023 Promox on Morefine N6000 16GB 512GB Software Etcher 100MB (not but can be rufus-4.3.exe 1.4MB) Proxmox VE 7.4 ISO Installer (1st ISO re...