tshark queries for upload