Hi John,
I doubt you can achieve this using capture filters. But, you should be
able to use the following display filter in WS:
tcp.analysis.retransmission or tcp.analysis.fast_retransmission
Using tshark, you may be able to use:
tshark -i <whatever> -R tcp.analysis.retransmission or
tcp.analysis.fast_retransmission
and this should show you only relevant packets (but only on standard
output and not while trying to save capture).
HTH
Abhik.
On Wed, Jul 9, 2008 at 7:00 PM, Sheahan, John
<John.Sheahan@xxxxxxxxxxxxx> wrote:
> Is there a handy filter available that will allow me to only capture TCP
> retransmissions?
>
> thanks
>
> john
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> https://wireshark.org/mailman/listinfo/wireshark-users
>