I am working with wireshark(tshark). I want to capture specific protocol like ipv6, coap13 etc. i added coap13.lua file.
i tried to capture ipv6 with "tshark.exe" -i 3 -f "ip6" -a duration:400 -a filesize:20480 -a files:512 -w "C:\Packet_Capture.pcap"
it runs well
but when i want to capture CoAP or CoAP13 with
"tshark.exe" -i 3 -f "coap13" -a duration:400 -a filesize:20480 -a files:512 -w "C:\Packet_Capture.pcap"
it didn't work.
What is the syntax to capture CoAP protocol? Where can i find the list(syntax) for capture filter?
asked 04 Mar '14, 02:54
edited 04 Mar '14, 02:54
As per the error message, display filters and capture filters are different. Also as per the error message, the Users Guide has informative sections on display and capture filters with links to other topics of interest.
In your particular case there is no explicit capture filter syntax for the protocols CoAP or CoAP13, but you could use
answered 04 Mar '14, 03:14