Hi,
I'm having an issue trying to extract certain calls from a dump I have already made with fairly specific criteria.
It appears it doesn't like my quotation marks I am using in my filter from wireshark. Im a novice at using tshark so i'll explain what im trying to achieve
input file : hammer2901b
output file: 0291400000
filter: sip.to.addr == "
sip:[email protected]:5060" or sip.to.addr == "sip:
[email protected]"
command I'm attempting to use in a linux environment:
tshark -r hammer2901b -w 0291400000 -R sip.to.addr == "
sip:[email protected]:5060" or sip.to.addr == "sip:
[email protected]"
output always remains as: tshark: Read filters were specified both with "-R" and with additional command-line arguments
Any advice greatly appreciated.
Regards,
Neil Fraser.
