tshark field extraction HD

Full Wireshark Crash Course: https://www.udemy.com/wireshark-crash-course/?couponCode=CSSOYouTube I was asked by one of my students to create a more advanced tshark lesson. In this lesson you will learn how to extract fields out of large pcap files and organize them. Commands: 02:53 - "tshark -r http.pcap -T fields -e http.request.method" 03:56 -"tshark -r http.pcap -T fields -e http.request.method | sort | uniq -c" 05:30 - "tshark -r http.pcap -T fields -e http.request.uri" 07:21 - "tshark -r http.pcap -R "http.request.method == "GET"" -T fields -e ip.dst" 07:44 - "tshark -r http.pcap -R "http.request.method == "GET"" -T fields -e ip.dst | sort | uniq-c"