[Stuart Kendrick <skendric@xxxxxxxxx>]

Hi Chitta,

how about:

tshark -i any -f "port sip" -w /tmp/test.pcap

--sk

On 12/12/2011 9:08 AM, chittaranjan panda wrote:

Hi All,

 

I am getting below error when trying to ave filtered capture. I was running it in a UNIX Box.

 

tshark: Read filters aren't supported when capturing and saving the captured packets.

 

tethreal -i any -R "sip" -w /tmp/test.pcap.

 

Please help me out on this.

 

Thanks in advance.

 

-Chitta

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe