Re: [Wireshark-users] How to compute the number of packets with bad checksum

[Chris Maynard <Chris.Maynard () gtech com>]

W T <wokelmal@...> writes:

> Now, I need to calculate the number of IP packets that have IP header
> error (bad check sum)errors, using wireshark. Can any tell me the
> steps to do this.

How about just using a display filter of "ip.checksum_bad==1"?  The number of
packets matching the filter will be displayed and the count of them is indicated
in the status bar.  Alternatively, tshark could be used instead, e.g.,

tshark -r file.pcap -R "ip.checksum_bad == 1" | wc -l



___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe