Revision history  [back]

I want to capture a data stream coming from a pipe and save it to a file (by -w) but with an applied filter (portnumber).

-R doesn't work because "tshark: -R without -2 is deprecated"

-R -2 doesn't work because "Live captures do not support two-pass analysis."

-Y doesn't work because "tshark: Display filters aren't supported when capturing and saving the captured packets."

so, how can I do ??

greetings, f.