This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello I have problem with saving Tshark output to a pcap and in paralel print text on the screen. I know that there is -P option but it seems it is not working. I'm trying to run following command using LINUX (ubuntu 12.10 and tshark 1.7.0):

tshark -P -i eth0 -f tcp -w /tmp/eth0.pcap

Thank you in advance

Krzysztof

asked 15 Jan '13, 06:45

krzysztof's gravatar image

krzysztof
1111
accept rate: 0%

edited 16 Jan '13, 04:59

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245


I'm not sure in which version the option to print packets on screen while writing them to disk has changed, but it used to be '-S' and now it is '-P'. Could you check the output of 'tshark -h' to see if it is '-P' in your version of tshark?

permanent link

answered 16 Jan '13, 05:01

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

tshark -P -i eth0

permanent link

answered 28 Jun '16, 05:08

Mninawe%20Matrose's gravatar image

Mninawe Matrose
61
accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×832
×238
×91
×4
×3

question asked: 15 Jan '13, 06:45

question was seen: 24,255 times

last updated: 28 Jun '16, 05:08

p​o​w​e​r​e​d by O​S​Q​A