Revision history [back]

When I do something like:

wireshark.exe -k -i Ethernet -f udp -R icmp
wireshark.exe -k -i Ethernet -f udp --read-filter icmp

My assumption would be that it would start a new capture on Ethernet with a display filter of DNS. But I don't have any display filter selected in the display filter area when the capture loads up. Am I misunderstanding this option?

Windows 10 22H2, 4.2.3 x64

When I do something like:

wireshark.exe -k -i Ethernet -f udp -R icmp
dns
wireshark.exe -k -i Ethernet -f udp --read-filter icmp
dns

My assumption would be that it would start a new capture on Ethernet with a display filter of DNS. But I don't have any display filter selected in the display filter area when the capture loads up. Am I misunderstanding this option?

Windows 10 22H2, 4.2.3 x64