 | 1 | initial version |
You'll need to use Wireshark display filter syntax with the -Y option. You may also need the -2 option to enable 2-pass processing as used in the GUI.
See the tshark man page for more info on tshark options and the zigbee field reference guide on the fields to use. Note there are a few zigbee sub-dissectors.
