follow udp stream cmd line

asked 2018-12-08 12:27:59 +0000


I need to extract video from .pcap file (multicast stream). I can open file in wireshark->analyze->follow->UDP stream->show and save data as raw->save as->video.ts. But how I can get similar result in tshark? When I use tshark -r abc.pcap -z follow,udp,raw,0 -w video.ts, I get something wrong.

edit retag flag offensive close merge delete