This script creates a tshark command that can be used to filter the tcp streams that were initiated by client side

Client_flows_filter

#!/bin/bash
tshark -r ip_complete.pcap -2R "ip.src==10.0.1.1 and tcp.flags.syn==1 and tcp.flags.ack!=1" -n -Tfields -e tcp.stream > stream_names
sleep 10
cmd="tshark -r ip_complete.pcap -2R \"ip.src==10.0.1.1 and ("
while read line;
do
	new="tcp.stream eq $line or "
	cmd=$cmd$new
done < stream_names
cmd=$cmd"tcp.stream eq 10000)"
cmd=$cmd"\" -w test.pcap"
echo $cmd
eval "$cmd"