Executing the -z conv,ip
command does not display the hostnames (like in wireshark).
I execute the command, and after a bit of traffic was monitored, I stop tshark with Ctrl-C and then the conversation table is printed. For both Linux and Windows, the messages displayed before the conversation table correctly show hostnames, only the conversation table doesn't have them.
Linux:
- command:
tshark -i 1 -N n -f "tcp or udp" -z conv,ip
- OS: Fedora 17 x86
- tshark version: 1.6.12
- Solutions tried:
- Ommiting
-N
- Using
-N C
- Ommiting
Windows:
- command:
tshark -i 2 -f "tcp or udp" -z conv,ip
- OS: Windows 7 x64
- tshark version: 1.8.4
- Solutions tried:
- Ommiting
-N
- Using
-N C
- Using
-N n
causes tshark error out on Ctrl-C: (tshark.exe:9692): CaptureChild-WARNING **: signal_pipe_capquit_to_child: 4 header: error Invalid argument
- Ommiting
How do I make tshark -z conv,ip display resolve hostnames?