Ask Your Question

Revision history [back]

The tshark equivalent is the -z,follow,prot,mode,filter[,range] option described in the man page here.

You'll probably end up with something like:

tshark -r ... -z,follow,tcp,raw,<your filter>

where <your filter=""> will be either the stream index or ip-addr:port pairs as described in the man page.

The tshark equivalent is the -z,follow,prot,mode,filter[,range] option described in the man page here.

You'll probably end up with something like:

tshark -r ... -z,follow,tcp,raw,<your filter>

where <your filter=""> filter> will be either the stream index or ip-addr:port pairs as described in the man page.

The tshark equivalent is the -z,follow,prot,mode,filter[,range]-z follow,prot,mode,filter[,range] option described in the man page here.

You'll probably end up with something like:

tshark -r ... -z,follow,tcp,raw,<your -z follow,tcp,raw,<your filter>

where <your filter> will be either the stream index or ip-addr:port pairs as described in the man page.