Wireshark-bugs: [Wireshark-bugs] [Bug 2234] Filtering tshark captures with display filters (-R)

Date: Mon, 19 Sep 2011 01:45:23 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2234

dwkim@xxxxxxxxx changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dwkim@xxxxxxxxx

--- Comment #20 from dwkim@xxxxxxxxx 2011-09-19 01:45:18 PDT ---
some tip
using text2pcap

tshark -p -i eth0 port 5060 -R sip -x |awk ' { if ( length($1) > 8 ) print $1 ;
if ( length($1) == 4 ) print $0 } ' |text2pcap -t "%H:%M:%S." - a.pcap

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.