Tshark command which gets content size


Hello Everyone ,

 I am basically parsing a HAR file and tring to get all the tcp connections opened by a domain ie host . For this i am using the following tshark command :

  tshark -r vox.pcap -Y "ip.dst == && http" -T fields -e ip.src -e ip.dst -e tcp.port -e col.Info

How can i get the content size downloaded from each tcp connection using tshark command . As in above command i am only getting the tcp port and column info which specified the object which is downloaded , but i also want the size of object downloaded .

Please help :cry: