Wireshark-users: Re: [Wireshark-users] Tshark - displaying all sdp.media_attr on win2k system

From: Christopher Maynard <Chris.Maynard@xxxxxxxxx>
Date: Tue, 9 Nov 2010 18:06:57 +0000 (UTC)
Boonie <newsboonie@...> writes:

> Any thoughts? Or am I out of luck?

You might be able to use something like: tshark -R "frame contains FOO"
or even: tshark -R "sdp.media_attr && frame contains FOO"