Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Filter existing file

From: "Kuhs Lukas" <Lukas.Kuhs@xxxxxxxxxxxxxxxxx>
Date: Tue, 22 Jan 2008 17:13:58 +0100
Thanks Jeff, thanks Stephen!
Lukas

-- 
  --
    --

       Lukas KUHS
       Alcatel Lucent Deutschland AG
       Mobile Stuttgart, Multi-Standard (WiMAX)
     
    --
  --
--


Alcatel-Lucent Deutschland AG 
Sitz der Gesellschaft: Stuttgart - Amtsgericht Stuttgart HRB 4026
Vorsitzender des Aufsichtsrats: Michael Oppenhoff
Vorstand: Wolfgang Weik (Vors.), Dr. Rainer Fechner, Juergen Poesinger,
Alf
Henryk Wulf
 

> -----Original Message-----
> From: wireshark-users-bounces@xxxxxxxxxxxxx 
> [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of 
> Jeff Morriss
> Sent: Dienstag, 22. Januar 2008 17:11
> To: Community support list for Wireshark
> Subject: Re: [Wireshark-users] Filter existing file
> 
> 
> 
> Kuhs Lukas wrote:
> > Hi,
> > 
> > I want to filter an existing pcap-file using dumpcap on 
> Windows. This is
> > not possible since there is no infile option anymore. 
> Tethereal had this
> > option. My question is, whether this will be included in a 
> later version
> > or not. Do you know any workaround except for using 
> tethereal? I need to
> > execute it on the command line.
> 
> dumpcap is only a capturing tool.  If you want to filter or 
> do analysis, 
> better use tshark (it's the equivalent of tethereal after the 
> name change).
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-users
>