I want to capture a data stream coming from a pipe and save it to a file (by -w) but with an applied filter (portnumber).
-R doesn't work because "tshark: -R without -2 is deprecated"
-R -2 doesn't work because "Live captures do not support two-pass analysis."
-Y doesn't work because "tshark: Display filters aren't supported when capturing and saving the captured packets."
so, how can I do ??
greetings, f.
