Wireshark-users: [Wireshark-users] Is it a bug with Wireshark?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Vinay Chilakamarri" <vinay.chilakamarri@xxxxxxxxx>
Date: Sun, 13 Apr 2008 08:16:30 -0700
Hi,

After many attempts at this, I couldn't understand why WireShark disregards the "-R" argument. I worked with tshark with valid display filters and passed them with "-R" argument and they were working as expected. But when I try the same with wireshark, no matter how I tried supplying the filter with "-R" argument, it displays all of the packets. I tried this in windows, while it doesn't filter anything:

wireshark -f "udp port 37112" -i2 -k  -R"(wlan.addr==00:2E:E0:76:5D:83)"

wireshark -f "udp port 37112"   -R"wlan.addr==\"00:2E:E0:76:5D:83"" -i2 -k

wireshark -f "udp port 37112"   -R'wlan.addr==00:2E:E0:76:5D:83' -i2 -k

wireshark -f "udp port 37112"   -R wlan.addr==00:2E:E0:76:5D:83 -i2 -k