This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

tshark follow,udp,raw write file(pipe)

0

Hello,

what syntax to use?

tshark -r mon0.pcap -q -z "follow,udp,raw,192.168.1.102:52166,239.0.0.1:1234" -w test.ts

write eq mon0.pcap-dump udp stream.

In wireshark -analyze->follow udp stream- its ok.Make .ts file.

Thanks.

asked 20 Jun '16, 03:55

marian34's gravatar image

marian34
6●1●1●3
accept rate: 0%

edited 20 Jun '16, 08:35