Wireshark-users: [Wireshark-users] Tshark and using display filters
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Irakli Natshvlishvili" <iraklin@xxxxxxxxx>
Date: Fri, 4 May 2007 12:14:14 -0800
I have a capture file, want to use tshark to filter packets and write a new file.

When I use

tshark -r all.cap -w filtered.cap -R udp contains "100"

'I'm getting

tshark Read filters were specified both with "-R" and with additional command-line arguments

Platform is XP with SP2. What I'm doing wrong?

--
I.N.