This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Tshark -w switch

0

Hi

I'm having problems using the -w switch with tshark command (V. 1.12.1).

If I use this syntiax: tshark -r "test.pcap" -Y "udp.port == 9090" I get what I want on screen (the output is correct).

Instead, if I add the -w switch tshark -r "test.pcap" -Y "udp.port == 9090" -w "out.pcap" The output file is empty.

Any suggestions? AF

asked 05 Nov '14, 06:16

AF69's gravatar image

AF69
1111
accept rate: 0%