Faster: tshark or tcpcump?

[Chip <jeffschips () gmail com>]

For grabbing only the endpoint ips for https and http traffic, which is 
faster when dealing with high-bandwidth traffic, tshark or tcpdump?

I need to grab only the end to end point ips along with timestamp, in 
files, preferably in multiple files after a certain size limit.

This will be traffic gleaned from a in line tap.

Thank you.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe