Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Tshark filter issue

Hi, i have a tshark command but it does not work. Basically i use it like that: TSHARK_FILTER="\"port 18581 or port 5060 or (port 16050 and greater 72)\"" tshark -q -n -i any -f $TSHARK_FILTER -b files:100 -b filesize:40000 -w /tmp/test.pcap

I need to use tshark filter as variable, when i run the command i am getting this: tshark: A capture filter was specified both with "-f" and with additional command-line arguments. How can i solve this?

Tshark filter issue

Hi, i I have a tshark tshark command but it does not work. Basically i I use it like that: that:

TSHARK_FILTER="\"port 18581 or port 5060 or (port 16050 and greater 72)\"" 72)\""

tshark -q -n -i any -f $TSHARK_FILTER -b files:100 -b filesize:40000 -w /tmp/test.pcap

I need to use tshark tshark filter as variable, when i variable. When I run the command i command, I am getting this: this:

tshark: A capture filter was specified both with "-f" and with additional command-line arguments.

How can i I solve this?

Tshark filter issue

Hi, I have a tshark command but it does not work. Basically I use it like that:

TSHARK_FILTER="\"port 18581 or port 5060 or (port 16050 and greater 72)\""
72)\""

tshark -q -n -i any -f $TSHARK_FILTER -b files:100 -b filesize:40000 -w /tmp/test.pcap

/tmp/test.pcap

I need to use tshark filter as variable. When I run the command, I am getting this:

tshark: A capture filter was specified both with "-f" and with additional command-line arguments.

How can I solve this?

Tshark filter issue

Hi, I have a tshark command but it does not work. Basically I use it like that:

TSHARK_FILTER="\"port 18581 or port 5060 or (port 16050 and greater 72)\"" 
tshark -q -n -i any -f $TSHARK_FILTER -b files:100 -b filesize:40000 -w /tmp/test.pcap

I need to use tsharkTSHARK_FILTER filter as variable. When I run the command, I am getting this:

tshark: A capture filter was specified both with "-f" and with additional command-line arguments.

How can I solve this?