Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2872] full trace is saved in file rather than filtered out

Date: Sun, 14 Sep 2008 09:17:16 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2872


Gerald Combs <gerald@xxxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |gerald@xxxxxxxxxxxxx
             Status|NEW                         |RESOLVED
         Resolution|                            |DUPLICATE




--- Comment #1 from Gerald Combs <gerald@xxxxxxxxxxxxx>  2008-09-14 09:17:15 PDT ---
This is because dumpcap (which does the actual capture) is writing the packets
to disk before TShark reads them. You might try using a capture filter instead
(which is passed to dumpcap):

tshark -i bond0 -f 'udp port 9200 or udp port 9201' -w WSP_traffic.test.trc

*** This bug has been marked as a duplicate of bug 2234 ***


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.