I am working with wireshark(tshark). I want to capture specific protocol like ipv6, coap13 etc. i added coap13.lua file.
i tried to capture ipv6 with "tshark.exe" -i 3 -f "ip6" -a duration:400 -a filesize:20480 -a files:512 -w "C:\Packet_Capture.pcap" it runs well but when i want to capture CoAP or CoAP13 with "tshark.exe" -i 3 -f "coap13" -a duration:400 -a filesize:20480 -a files:512 -w "C:\Packet_Capture.pcap" it didn't work.
What is the syntax to capture CoAP protocol? Where can i find the list(syntax) for capture filter? asked 04 Mar '14, 02:54  Amrit edited 04 Mar '14, 02:54 |
One Answer:
As per the error message, display filters and capture filters are different. Also as per the error message, the Users Guide has informative sections on display and capture filters with links to other topics of interest. In your particular case there is no explicit capture filter syntax for the protocols CoAP or CoAP13, but you could use answered 04 Mar '14, 03:14  grahamb ♦ |
