Is there way to apply display filter for a cap file and save it as seperate cap file with filtered data only..? eg, 1.I have a cap file with full packets 2.Apply display filter to the first cap and save the filtered packets in to another cap file..!
I need this to be done through tshark or some other CLI utility...
Thanks in advance..
You can do
answered 01 Aug '12, 04:48