Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2234] Filtering tshark captures with display filters (-R)

Date: Tue, 27 Oct 2009 05:33:54 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2234


mark bairstow <mark.bairstow@xxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mark.bairstow@xxxxxxxxxxxx




--- Comment #14 from mark bairstow <mark.bairstow@xxxxxxxxxxxx>  2009-10-27 05:33:52 PDT ---
Hi,

I guess there will never be a fix for this issue. 

The display filter works fine when reading from a capture file and output to
the screen but not when writing (-w) to another file. The data in the new file
is incorrect yet the IP and TCP (sequence and acknowledge numbers) information
seem the same. Is this the same bug?

The commend in use is tshark -r <file1> -w <file2> -R http.response.code==400

Thx
Mark


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.