Convert from port numbers to protocol names ?
- by Berkay
i'm simply using
tshark -r botnet.pcap -T fields -E separator=';' -e ip.src -e tcp.srcport -e ip.dst -e tcp.dstport '(tcp.flags.syn == 1 and tcp.flags.ack == 0)'
to see the all initiated "legal TCP" connections. However, i need the destination port number conversion to "http" "netbios" etc.
i'm not using -n option, but still i get:
…