First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

tshark filtering

  • retag add tags

hii

i wannt to can for long time tshark and i want to save it in the local machine

i want to filter only icmp and arp data , how can i do it ?

kobi's avatar
1
kobi
asked 2022-07-19 06:14:32 +0000
Guy Harris's avatar
19.9k
Guy Harris
updated 2022-07-19 06:57:54 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Use the capture filter option: -f "icmp or arp" on the command line.

Jaap's avatar
13.7k
Jaap
answered 2022-07-19 06:41:10 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer