How do I load capture file from command line, using wireshark.exe I am unable to load a pcap file into the GUI of Wireshark via a command line load, using run of wireshark.exe. I will put in some options and display filters on the load later. Right now I cannot even seem to get the GUI to load pointing at a pcap. I can open the pcap in the GUI by just bringing up the GUI "FIRST" and then opening the pcap, but this way of loading is not going to work for my purposes. asked 15 Mar '17, 11:20  tptools |
One Answer:
Use You can see all command line parameters by running answered 15 Mar '17, 11:25  Jasper ♦♦ |
Tried that and doesn't work:
If your filename has spaces, use quotation marks:
Figured it out, and is not documented ANYWHERE.. CANNOT have any spaces in the filename of the pcap.
This is NOT good when one uses Wireshark and pcaps within for "forensic" purposes, as I do. Especially when one must maintain MD5 hashes of the files used for evidence and during research of.
Not true. You should have read my comment about putting the filename in quotation marks. And this is not the fault of Wireshark, it's command line behavior that is the same for all programs you run.