Hi, When I run tshark with a capture filter, I can see the messages going to and from my machine. I am able to save to a pcap file using the -w and -F options.
But is there a way to do both simultaneously? (view the output using display filter and save to file whatever is captured during my session - preferable filtered)
When I try this, I receive the following error
tshark -Y bacnet -w bvlc.pcap -F pcap
tshark: Display filters aren't supported when capturing and saving the captured packets.
Is there any way I can do this?
Thanks, Ashwin N
