Wireshark-users: Re: [Wireshark-users] How to filter large files without opening them?
From: Jaap Keuter <[email protected]>
Date: Fri, 22 Sep 2006 07:53:16 +0200 (CEST)

How about using Tshark for this?


On Fri, 22 Sep 2006 [email protected] wrote:

> Hi everyone.
> I use wireshark in windows environment to search for specific packets by
> display filters from large files. I first open the file and then run a
> filter on it. That takes a long time for many files.  Is it possible to
> use filters in unix environment and is it possible to open the files by
> filters?
> That would make it easier and faster.