Ask Your Question

avi's profile - activity

2019-08-28 13:48:52 +0000 commented answer Identifying dldp and hgmp packets

Thank you very much for your answer. I do believe that the packets structure of DLDP should be close to UDLP so they mi

2019-08-27 14:15:01 +0000 asked a question Identifying dldp and hgmp packets

Identifying dldp and hgmp packets I need to find a way to identify DLDP and HGMP packets. I didn’t see that the wireshar

2018-03-07 13:10:15 +0000 commented answer -Q -P Tshark flags works fine for text but doesn't work for pcap

Thank you Grahm B, i've opened Bug 14491 at Bugzila. Regarding your question, it's an ancient line in a code written by

2018-03-07 11:23:58 +0000 marked best answer -Q -P Tshark flags works fine for text but doesn't work for pcap

Dear reader,

I used the following line for getting the results in text file and it works fine. i.e. No notification messages in the error channel.

"C:\Program Files (x86)\Wireshark\tshark.exe" -Q -P -i 4 -Y "ip.dst==172.17.231.50&&icmp" -V -S 5%%%5 > C:\temp\output.txt

When trying to get the results in a pcap file, I received notification messages in the error channel.

"C:\\Program Files (x86)\\Wireshark\\dumpcap.exe" -i 4 -w - | "C:\\Program Files (x86)\\Wireshark\\tshark.exe" -Q -P -r - -Y "ip.dst==172.17.231.50&&icmp" -w "C:\\temp\\output.pcap"

Trying to add –P –Q to the first part yielded an error message saying: “C:\Program Files (x86)\Wireshark\dumpcap.exe: invalid option -- 'Q'”

"C:\Program Files (x86)\Wireshark\dumpcap.exe" -Q -P -i 4 -w - | "C:\Program Files (x86)\Wireshark\tshark.exe" -Q -P -r - -Y "ip.dst==172.17.231.50&&icmp" -w "C:\temp\output.pcap" C:\Program Files (x86)\Wireshark\dumpcap.exe: invalid option -- 'Q'

Is there a proper way of getting the captured packets into a pcap file without any notification messages in the error channel?

(The double backslash is because I’m activating the command with python)

2018-03-07 10:00:47 +0000 asked a question -Q -P Tshark flags works fine for text but doesn't work for pcap

-Q -P Tshark flags works fine for text but doesn't work for pcap Dear reader, I used the following line for getting the

2018-03-06 13:50:01 +0000 commented answer Tshark - Notifications in the error file

Dear reader, Subject: -Q -P Tshark flags works fine for text but doesn't work for pcap I used the following line for g

2018-03-06 13:47:56 +0000 commented answer Tshark - Notifications in the error file

Dear reader, I used the following line for getting the results in text file and it works fine. No notification messages

2018-03-06 13:45:59 +0000 commented answer Tshark - Notifications in the error file

Dear reader, I used the following line for getting the results in text file and it works fine. No notification messages

2018-03-06 13:33:43 +0000 commented answer Tshark - Notifications in the error file

Dear reader, I used the following line for getting the results in text file and it works fine. No notification messages

2018-03-06 13:06:00 +0000 received badge  Editor
2018-03-06 13:06:00 +0000 edited answer Tshark - Notifications in the error file

I used the following line for getting the results in text file and it works fine. No notification messages in the error

2018-03-06 12:44:57 +0000 answered a question Tshark - Notifications in the error file

I used the following line for getting the results in text file and it works fine. No notification messages in the error

2018-02-19 18:56:10 +0000 commented answer Tshark - Notifications in the error file

Thank you Guy Hurris. I tested this solution and the a-err contains only errors (if there are) and not notifications. W

2018-02-19 17:45:30 +0000 commented answer Tshark - Notifications in the error file

Thank you Guy Hurris. Worked for me but only on one of three PCs I used it on. Is the -Q new? It didn't work on older wi

2018-02-19 17:45:05 +0000 marked best answer Tshark - Notifications in the error file

Dear reader,

I’m using the Tshark from a command line.

My command is: tshark -i 4 -Y "ip.dst==172.17.231.50&&icmp" 1>c:\temp\a-out.txt 2>c:\temp\a-err.txt

In the a-err.txt file I’m getting the below notification while this file should only include errors:

Capturing on 'Intel(R) Ethernet Connection I217-LM'
7 packets captured

Is there any way to change the command line so the a-err.txt file will contain only error messages?

2018-02-19 17:45:05 +0000 received badge  Scholar (source)
2018-02-19 17:41:47 +0000 received badge  Rapid Responder (source)
2018-02-19 17:41:47 +0000 answered a question Tshark - Notifications in the error file

Thank you Guy Hurris. Worked for me but only on one of three PCs I used it on. Is the -Q new? It didn't work on older w

2018-02-18 14:20:17 +0000 asked a question Tshark - Notifications in the error file

Tshark - Notifications in the error file Dear reader, I’m using the Tshark from a command line. My command is: tshark