FOLLOWING DATA STREAMS

TCP

root@dco:~$ tshark -r demo.pcapng -z follow,tcp,ascii,1 -q
 ===================================================================
 Follow: tcp,ascii
 Filter: tcp.stream eq 1
 Node 0: 145.254.160.237:3371
 Node 1: 216.239.59.99:80
 GET /pagead/ads?client=ca-pub-2309191948673629&random=1084443430285&lmt=1082467020&format=468x60_as&outp...
 Host: pagead2.googlesyndication.com
 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040113
 ...

 HTTP/1.1 200 OK
 P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC"
 Content-Type: text/html; charset=ISO-8859-1
 Content-Encoding: gzip
 Server: CAFE/1.0
 Cache-control: private, x-gzip-ok=""
 Content-length: 1272
 Date: Thu, 13 May 2004 10:17:14 GMT

 ...mmU.x..o....E1...X.l.(.AL.f.....dX..KAh....Q....D...'.!...Bw..{.Y/T...<...GY9J....?;.ww...Ywf..... >6..Ye.X..H_@.X.YM.......#:.....D..~O..STrt..,4....H9W..!E.....&.X.=..P9..a...<...-.O.l.-m....h..p7.(O?.a..:..-knhie...
 ..g.A.x..;.M..6./...{..9....H.W.a.qz...O.....B..
 ===================================================================

UDP

root@dco:~$ tshark -r demo.pcapng -z follow,udp,ascii,1 -q
 ===================================================================
 ...

HTTP/HTTP2

root@dco:~$ tshark -r demo.pcapng -z follow,http,http2,ascii,1 -q
 ===================================================================
 ...

Last updated