This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Can’t view and write at the same time now?

0

Hello. I used to be able to to the following:

tshark -t ad -n -S -w bleh.pcap ip and host whatever

is there a way I can do this with the new version of tshark? Thank you.

James

asked 13 Aug '12, 14:57

DigiAngel's gravatar image

DigiAngel
1●3●3●4
accept rate: 0%

One Answer:

1

The -S option is now used for something else, you can use the -P option, see "tshark -h":

  -P        print packets even when writing to a file

answered 13 Aug '12, 15:01

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k●9●57●245
accept rate: 20%

Awesome...just what I needed...thank you!

(13 Aug '12, 15:42) DigiAngel