Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 9992] Using tshark with -w option together with -2 and -R results in a crash

[bugzilla-daemon@xxxxxxxxxxxxx]

Comment # 2 on bug 9992 from Joakim Johansson

Sorry for the messy format of this bug report.

I came across this while checking out the correction to this bug:

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9747

When tested out the development release, I was not able to run tshark like I
used to run it:

C:\Program Files\Wireshark>tshark -r input.pcap -2 -R "sip or megaco" -w C:
\Temp\output.pcap

That command results in a crash/popup - "Tshark has stopped working".

If I run the command without -2 and with Y instead of -R, the command runs OK
and the timestamps in the output look great... but the 2-pass filtering seems
broken. I tried out other display filters just in case, all with the same
result.

Thanks!

/JJ

---

      You are receiving this mail because:

• You are watching all bug changes.