Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2234] Filtering tshark captures with display filters (-R)

Date: Fri, 15 Aug 2008 11:31:56 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2234


Matt Roberts <fabwash@xxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |fabwash@xxxxxxxxxxx




--- Comment #4 from Matt Roberts <fabwash@xxxxxxxxxxx>  2008-08-15 11:31:56 PDT ---
-w -R works fine if you are reading from a file (-r). The problem here is that
if you're capturing megabytes of data and try to filter this on the fly to make
a smaller resulting file then this is not possible anymore, and this is
problematic for me too.

I understand why -w is ignored, but this results in basically ignoring -R in
tshark when not reading from a file and forces people to use more disk space
and make the analysis a two step (two files) process.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.