Wireshark-users: [Wireshark-users] Apply read filter while writing to file
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Muhammad El-Sergani <msergani@xxxxxxxxx>
Date: Thu, 7 Mar 2013 12:27:07 +0200
Hello all,

After a recent Wireshark update on one of our SIP servers, we are unable to apply a read filter while writing the capture file, but rather have to capture everything to a host, write that to a file then apply our read filters when reading from the file.

This is hard to maintain as our SIP traffic is huge, and just capturing everything is unpractical.

Is there a known/method/practice/script that can be used to allow users to apply a read filter to a trace session while writing the dump to a file?

Everything is Linux based.

Thanks
in advance!
//M