Revision history [back]
-Y bacnet is a display filter, not a capture filter.
A capture filter would be specified with -f, such as
tshark -f "tcp port 99" -w bvlc.pcap -F pcap
which does work.
We don't support using a display filter with a live capture; that's what the error message means.
-Y bacnet is a display filter, not a capture filter.
A capture filter would be specified with -f, such as
tshark -f "tcp port 99" -w bvlc.pcap -F pcap
which does work.
We don't support using a display filter with a live capture; that's what the error message means.
-Y bacnet is a displayread filter, not a capture filter.
A capture filter would be specified with -f, such as
tshark -f "tcp port 99" -w bvlc.pcap -F pcap
which does work.