Wireshark: Difference between revisions

Content added Content deleted

Inline

@@ Line 130: / Line 130: @@
 *Show traffic from 10:27 to 10:29
- tshark -r nstrace1.cap -t ud | egrep -E '2017-07-25 10:2[7-9].'
+ tshark -r trace1.cap -t ud | egrep -E '2017-07-25 10:2[7-9].'
 *Show traffic from 10:27 to 10:29
 {{notice|This filter is not tested successfully yet.}}
- tshark -r nstrace1.cap -t ud '(frame.time >= "July 25, 2017 10:26:00.0") && (frame.time == "July 25, 2017 10:30:00.0")'
+ tshark -r trace1.cap -t ud '(frame.time >= "July 25, 2017 10:26:00.0") && (frame.time == "July 25, 2017 10:30:00.0")'
 ;Decode SSL encrypted Traffic:
 {{notice|This filter is not tested successfully yet.}}
- tshark -r nstrace1.cap -t ud | egrep -E '2017-07-25 10:2[7-9].' -o ssl.keys_list:"192.168.3.206","443","http","/home/aman/Downloads/NSTrace/nstrace.sslkeys"
+ tshark -r trace1.cap -t ud -o ssl.keys_list:"192.168.3.206","443","http","/home/aman/Downloads/Trace/trace.sslkeys" | egrep -E '2017-07-25 10:2[7-9].'
 = Misc =