Wireshark-users: Re: [Wireshark-users] pcap and text at the same time?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Sake Blok <sake@xxxxxxxxxx>
Date: Thu, 22 Nov 2007 12:00:01 +0100
On Thu, Nov 22, 2007 at 11:37:08AM +0100, Xu Yao wrote:
> 
> I would like to know if it's possible to display the capture in text format
> in stdout and save it in a file in pcap format at the same time during a
> live capture.

Yes, that's possible

> If so, what's the command to do so in tshark?

>From "tshark -h":

  -S                       display packets even when writing to a file


So you would use something like "tshark -w <file> -S -i <int>"

Hope this helps,  Cheers,


Sake