This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

how do I create an output file with tshark?

I am trying to create an output file with tshark. I have read the help command output, but I think I am missunderstanding something. I get file could not be opened, and permission denied. Does the output argument -w not write a file and output to that file? When I run the command .\tshark.exe -c 100 -i 6 -w test I get a prompt for the administrator password, which I then provide, but it fails anyhow. Heres a picture. alt text How do I create an output file when running tshark?

tshark

asked 07 Jul '16, 17:58

Eric Lovejoy
1●4●4●5
accept rate: 0%

One Answer:

By specifying, as the argument to the -w flag, a pathname to a file in a directory to which you have write permission.

You probably don't have write permission to c:\Program Files\Wireshark. Try either running in a directory to which you have permission (which means you might have to specify the full path to tshark in the command, i.e. c:\Program FIles\Wireshark\Tshark.exe; you might have to quote that, as it contains a space), or specifying a full path to the -w argument, e.g. c:\my\directory\test.

answered 07 Jul '16, 19:42

Guy Harris ♦♦
17.4k●3●35●196
accept rate: 19%