I'm facing an issue while writing a tshark filter expression through tcl -- where we write the expression using 'contains'
For Eg. "tshark -r $captureFile -qz io,stat,0, eth.src==$sourceMac&&isis.lsp.lspid contains 'ff' "
I am able to write expressions which do not contain any spaces and use the == operator but I'm getting an error when trying to get the above expression working ....essentially : isis.lsp.lspid contains "ff"
Somehow, either the spaces in the expression or the "" around ff are causing it. Also tried escaping the "" (\"ff\")
One of the errors: Protocol ("ff") cannot appear on right-hand side of comparison.
But I'm not able to get it working even after trying a number of different combinations.
Any suggestions on how to get it working ?
asked 17 Aug '12, 13:07
edited 17 Aug '12, 13:12
The problem is that
And in case you ever want to test for
See also question 2274.
answered 18 Aug '12, 10:01