Last active
April 30, 2020 16:39
-
-
Save kofemann/5b7f9e1e52065e4eb6bb to your computer and use it in GitHub Desktop.
tshark recepies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| dumpcap -p -q -w - -f "port 2049 or tcp portrange 7000-10000" | \ | |
| tshark -n -r - -q -Y rpc.replystat -Tfields -E header=y -e frame.time -e frame.number -e ip.src -e ip.dst -e nfs.main_opcode -e rpc.time | |
| # show NFS nfs requests slower that 5ms | |
| tshark -f "port 2049" -Y "rpc.time > 0.005" -i any -T fields -e frame.number -e frame.time_delta -e ip.src -e ip.dst -e col.Protocol -e rpc.time -e col.Info |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment