Wireshark · Wireshark-dev: Re: [Wireshark-dev] filter expression required

["Gilbert Ramirez" <gram@xxxxxxxxxxxxxxx>]

You're really using the "contains" keyword? That's for strings and
binary strings.

The spaces in your filter are probably confusing the shell when you
invoke wireshark/tshark from the command-line. Are you running on
Unix? Use single quotes around your filter:

tshark ............ 'udp contains xxx'

--gilbert

On 7/2/07, Amit Paliwal <Amit.Paliwal@xxxxxxxxxxxxxxx> wrote:
> I want to set command line filter expression for proprietary protocol that
> is registered over UDP by its name. I am able to do it directly in Wireshark
> GUI by setting the expression as "UDP contains my_protocol", but I need to
> do the same from command line that I am unable to do right now.
>
> Please suggest.
>
> Regards,
>
> ______________________________________________________________________
>
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-dev