 | 1 | initial version |
Could it be that you want a display filter instead of a read filter?
From the Wireshark man page:
-R|--read-filter <read (display)="" filter=""> When reading a capture file specified with the -r flag, ...
-Y|--display-filter <display filter=""> Start with the given display filter.
