Did you note that in Wireshark GUI you quoted the string raw:ip:udp:data? What happens if you do the same in the TShark CLI?
raw:ip:udp:data