Revision history [back]

You should convert your display filters to capture filters, e.g.

tshark -p -n -i %interface% -a duration:100  -f "host %IP% and dst port %PORT%"  -w test.pcapng

Note that this filter will only capture traffic to the specified port which may be only one half of the expected traffic, you may need to change the port filter to capture traffic to and from the port, if so simply remove the dst part.