 | 1 | initial version |
As per the tshark -h output:
--export-objects <protocol>,<destdir> save exported objects for a protocol to
a directory named "destdir"
There is no indication that a filter can be applied. I just tried it with Tshark 3.0.1 and all http objects are saved. Whether I have a display filter for a specific tcp stream active or not doesn't matter, all http objects in the file are saved.
It would be useful if some filtering can be done, so you may add a feature request to Bugzilla for it.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.