https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2776
Summary: -w output file is not match with display filter
Product: Wireshark
Version: 1.0.2
Platform: PC
OS/Version: Linux (other)
Status: NEW
Severity: Normal
Priority: Medium
Component: TShark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: kimdowo@xxxxxxxxxxx
Build Information:
TShark 1.0.2
Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GLib 2.4.7, with libpcap 0.8.3, with libz 1.2.1.2, with POSIX
capabilities (Linux), without libpcre, without SMI, without ADNS, without Lua,
without GnuTLS, without Gcrypt, with MIT Kerberos.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.
Running on Linux 2.6.9-67.0.20.ELsmp, with libpcap version 0.8.3.
Built using gcc 3.4.6 20060404 (Red Hat 3.4.6-9).
--
ex)tshark -p -R "http.request.uri contains "test"" -w test.pcap -S
I want save to file only -R "http.request.uri contains "test"" but all captured
packet saved.
before 0.99.6 version is fine. tested(0.99.2,0.99.6)
after 0.99.7 version is not fine. tested(0.99.7,1.0.2)
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.