Hello Everyone ,
I am basically parsing a HAR file and tring to get all the tcp connections opened by a domain ie host . For this i am using the following tshark command :
tshark -r vox.pcap -Y "ip.dst == 103.245.222.143 && http" -T fields -e ip.src -e ip.dst -e tcp.port -e col.Info
How can i get the content size downloaded from each tcp connection using tshark command . As in above command i am only getting the tcp port and column info which specified the object which is downloaded , but i also want the size of object downloaded .
Please help 