Wireshark-dev: Re: [Wireshark-dev] Capture Filter tns.data_flag.rts
From: "Gilbert Ramirez" <[email protected]>
Date: Tue, 19 Dec 2006 05:08:33 -0600
There's a distinction between capture filters and display filters.
They use different syntaxes. See:


You *can* use display filters with tethereal, but be warned that
display filters are slower than capture filters. Use "-R" instead of


On 12/19/06, david lopez <[email protected]> wrote:
Hello I'm trying to use this filter 'tns.data_flag.rts' to capture only
RTS/CTS packets

I'm typing this in my shell: tethereal -i ath0 -c 500 -f tns.data_flag.rts

An d I'm grtting the next error messege:  Unable to parse the capture filter
string (syntax error). Interestingly enough, this lools like a valid display
filter. Are you sure you didn't mixthem up

Can somebody help me?

Thank you
Wireshark-dev mailing list
[email protected]