Ask Your Question

Revision history [back]

Try this:

tshark -r my.pcap -Y "tcp.flags == 0x011"