Hello I have problem with saving Tshark output to a pcap and in paralel print text on the screen. I know that there is -P option but it seems it is not working. I'm trying to run following command using LINUX (ubuntu 12.10 and tshark 1.7.0): Thank you in advance Krzysztof asked 15 Jan '13, 06:45  krzysztof edited 16 Jan '13, 04:59  SYN-bit ♦♦ |
2 Answers:
I'm not sure in which version the option to print packets on screen while writing them to disk has changed, but it used to be '-S' and now it is '-P'. Could you check the output of 'tshark -h' to see if it is '-P' in your version of tshark? answered 16 Jan '13, 05:01 SYN-bit ♦♦ |
tshark -P -i eth0 answered 28 Jun '16, 05:08  Mninawe Matrose |
