Johnny R <vasiana09@...> writes:
> Hi list,I am struggling right with tiny issue, actually, I am trying to get
the whole traffic on A interface, setup the right capture filter "ether host
00:1f:12:a3:48:3f " and everything is fine when using the gui (wireshark),but
when trying to capture the same traffic with tshark, nothing :'( Below the
command I used
> "tshark -i em1 -f "ether host 00:1f:12:a3:48:3f " -VVVVVV
-p -a filesize:10000 -w bssap_em1_$now.pcap".So my question is, since I am
little convinced that the above command is fine, is there a "real-time" issue
with tshark ?
First, what version of Wireshark are you using?
Is the problem that you don't see anything printed to the screen or that no
packets are being written to the capture file, or both?
Did you confirm that the Ethernet address is correct for the em1 interface?