[Chris Maynard <Chris.Maynard@xxxxxxxxx>]

Tharaneedharan Vilwanathan <vdharani@...> writes:

> $ tshark -i pipe_to_tshark -w test.pcap -f 'udp port 1900'
> $ tshark -i pipe_to_tshark -S -f 'udp port 1900'
> $ tshark -i pipe_to_tshark -w test.pcap -S -f 'udp port 1900'
> 
> In all the above cases, packets dont seem to be filtered. From the
> documentation, it looks like capture filter is valid only for live
> traffic.

See bug 1814: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1814