tshark how to count the number of returned packets

Question

I am using tshark and i need to findout how many of my 10,0000 packets contain a HTTP URI

Therefore, i have written the line of code that goes as followes:

tshark -r tsharklab.pcap -Y "http.request.uri"

However, when it is run, it provides all of them without re-formatiing the packet number.

What i need to achieve is calculating the number of returned packets after the filter is compleate.

Any help is greatly appreciated

score 0 · Accepted Answer · answered Oct 20 '20 at 15:18

0

I believe you can just count them via wc -l

tshark -r tsharklab.pcap -Y "http.request.uri" |wc -l

answered Oct 20 '20 at 15:18

Mark Scheck

1 Answers1