This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Tshark how to capture to a file and print text on screen

0

Hello I have problem with saving Tshark output to a pcap and in paralel print text on the screen. I know that there is -P option but it seems it is not working. I'm trying to run following command using LINUX (ubuntu 12.10 and tshark 1.7.0):

tshark -P -i eth0 -f tcp -w /tmp/eth0.pcap

Thank you in advance

Krzysztof

asked 15 Jan '13, 06:45

krzysztof's gravatar image

krzysztof
1111
accept rate: 0%

edited 16 Jan '13, 04:59

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245


2 Answers:

0

I'm not sure in which version the option to print packets on screen while writing them to disk has changed, but it used to be '-S' and now it is '-P'. Could you check the output of 'tshark -h' to see if it is '-P' in your version of tshark?

answered 16 Jan '13, 05:01

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

0

tshark -P -i eth0

answered 28 Jun '16, 05:08

Mninawe%20Matrose's gravatar image

Mninawe Matrose
61
accept rate: 0%