 | 1 | initial version |
-Y bacnet is a read filter, not a capture filter.
A capture filter would be specified with -f, such as
tshark -f "tcp port 99" -w bvlc.pcap -F pcap
which does work.
| | 2 | No.2 Revision |
-Y bacnet is a readdisplay filter, not a capture filter.
A capture filter would be specified with -f, such as
tshark -f "tcp port 99" -w bvlc.pcap -F pcap
which does work.
| | 3 | No.3 Revision |
-Y bacnet is a display filter, not a capture filter.
A capture filter would be specified with -f, such as
tshark -f "tcp port 99" -w bvlc.pcap -F pcap
which does work.
We don't support using a display filter with a live capture; that's what the error message means.