that really helps....thanks!
-----Original Message-----
From: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Abhik Sarkar
Sent: Thursday, July 10, 2008 8:26 AM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Capturing TCP Retransmissions
Hi John,
I doubt you can achieve this using capture filters. But, you should be
able to use the following display filter in WS:
tcp.analysis.retransmission or tcp.analysis.fast_retransmission
Using tshark, you may be able to use:
tshark -i <whatever> -R tcp.analysis.retransmission or
tcp.analysis.fast_retransmission and this should show you only relevant
packets (but only on standard output and not while trying to save
capture).
HTH
Abhik.
On Wed, Jul 9, 2008 at 7:00 PM, Sheahan, John
<John.Sheahan@xxxxxxxxxxxxx> wrote:
> Is there a handy filter available that will allow me to only capture
> TCP retransmissions?
>
> thanks
>
> john
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> https://wireshark.org/mailman/listinfo/wireshark-users
>
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-users