Wireshark-dev: [Wireshark-dev] Capture Filter Equivalent of tshark -d optino!
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Jack Liou" <jwliou95@xxxxxxxxx>
Date: Tue, 27 Nov 2007 17:50:00 -0800
Hi,
 
I am currently using tshark's  "-d udp.port==21000,rtp" option to tell tshark to treat UDP diagram on port 21000 as RTP packets. Can the same thing be done in capture filter. I know its doable on a captured file by using the "Decode As" feature. But can it being done in capture or display filters? Thanks for the help!
 
Jack