tshark

统计url
tshark -s 512 -i p5p2 -n -f 'tcp dst port 5435' -Y 'http.host and http.request.uri' -T fields -E separator='#' -E quote=d -e http.host -e http.request.uri -l | tr -d '\t'