Wireshark-bugs: [Wireshark-bugs] [Bug 9161] TShark read filters for tcp.analysis.* don't work
Date: Thu, 19 Sep 2013 14:21:17 +0000

Comment # 4 on bug 9161 from
(In reply to comment #2)
> Works for me, but I had to use the -r2 rather than -R2 so you can close it
> out.

Glad it worked for you, but the '-r <infile>' option specifies the file to
read.  The '-R <read filter>' option is for specifying the read filter, so the
following could not have possibly worked:

tshark -r2 00000_20130912135745.cap "tcp.analysis.window_full ||
tcp.analysis.zero_window" -w tcp.analysis.cap

Can you post the exact command you typed?


You are receiving this mail because:
  • You are watching all bug changes.