Wireshark-bugs: [Wireshark-bugs] [Bug 1029] Tshark -R doesn't support "frame.time >= Jul 20, 200
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 14 Sep 2006 08:23:52 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1029


jeff.morriss@xxxxxxxxxxx changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  BugsThisDependsOn|380                         |




------- Comment #1 from jeff.morriss@xxxxxxxxxxx  2006-09-14 08:23 GMT -------
The problem is that the date string needs to be in quotes, so does the entire
read filter, and the former's quotes must be protected against your shell. 
E.g., this does NOT work:

tshark -r bge2.cap -R "frame.time >= Aug  1, 2006 17:39:32.553872000"

but this does work:

tshark -r bge2.cap -R 'frame.time >= "Aug  1, 2006 17:39:32.553872000"'

I don't know if the former could produce a filter parse error (thus making the
problem obvious) or not, though...  I guess somewhere down in epan/ftypes/
there could/should be something but I can't tell from just reading the code (no
compiler access at the moment).


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.