Wireshark-users: Re: [Wireshark-users] Bug 1029 - Tshark -R doesn't support " frame.time &gt

From: Christopher Maynard <Chris.Maynard@xxxxxxxxx>
Date: Tue, 14 Sep 2010 16:50:11 +0000 (UTC)
Jeff Morriss <jeff.morriss.ws@...> writes:

> 
> That command line runs fine when I run it from a Cygwin shell on Windows 
> but the Windows cmd prompt doesn't like it.  I suppose Windows' quoting 
> rules are different somehow--I don't know Windows enough to know how to 
> get it to work there.

Does this work?

tshark -r 07_test.pcap -R "frame.time >= \"Aug 1, 2010 17:39:32.553872000\""