Wireshark · Wireshark-users: Re: [Wireshark-users] TSHARK.EXE command line requirements with Filter are impossible in Windows. An

["Jeroen Eeuwes" <jeroeneeuwes@xxxxxxxxx>]

Hi Guy,

> ...at least with a UNIX-style shell.  I'm not sure you can use single
> quotes in cmd.exe to quote arguments.

Single quotes don't work. You can escape the quotes inside the qoutes
with a backslash. At least that works for tshark.exe, I'm not sure if
it will work for every program.

Eg:

C:\Program Files\Wireshark>tshark -r c:\in.pcap -w c:\out.pcap -R
"frame.time ge \"Nov 05, 2007 17:00:00\" && frame.time le \"Nov 05,
2007 18:00:00\""

Best regards,
Jeroen