Wireshark-dev: Re: [Wireshark-dev] Capture Filter tns.data_flag.rts
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Gilbert Ramirez" <gram@xxxxxxxxxxxxxxx>
Date: Tue, 19 Dec 2006 05:08:33 -0600
There's a distinction between capture filters and display filters.
They use different syntaxes. See:

http://www.wireshark.org/faq.html#q7.7

You *can* use display filters with tethereal, but be warned that
display filters are slower than capture filters. Use "-R" instead of
"-f"

--gilbert

On 12/19/06, david lopez <dalopezperez@xxxxxxxxx> wrote:

Hello I'm trying to use this filter 'tns.data_flag.rts' to capture only
RTS/CTS packets

I'm typing this in my shell: tethereal -i ath0 -c 500 -f tns.data_flag.rts

An d I'm grtting the next error messege:  Unable to parse the capture filter
string (syntax error). Interestingly enough, this lools like a valid display
filter. Are you sure you didn't mixthem up

Can somebody help me?

Thank you
_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-dev