[eieio]

Claude is much faster at extracting fields from a pcap and processing them with awk than I am!

[catlifeonmars]

Have you tried wireshark?