This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi, I'm Seok-jae Yun from Korea.

I have a question about using command line(in DOS)

I want to sort data filtering with 40000 UDP port.

So, I input "wireshark.exe A201205130000.dat -R udp.port==40000 -w please.snoop"

but, the Wireshark only filter data, but didn't save as "please.snooop"

how can I filter data and save it?

Thank you. Seok-jae, Yun

asked 25 Oct '12, 05:54

Seok-Jae's gravatar image

Seok-Jae
0113
accept rate: 0%


I guess you should use tshark.exe instead of wireshark.exe, and then you can use the parameter "-F <fileformat>" to make it saving the file in a format it supports. If you call "tshark.exe -F" it will give you a list of supported output file formats.

permanent link

answered 25 Oct '12, 05:59

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Thank you very much The solution is "tshark.exe -r A201205130000.dat -R udp.port==40000 -F snoop -w please.snoop"

Thank you again

(25 Oct '12, 06:43) Seok-Jae
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×23
×16
×9

question asked: 25 Oct '12, 05:54

question was seen: 1,628 times

last updated: 25 Oct '12, 06:43

p​o​w​e​r​e​d by O​S​Q​A