Wireshark · Wireshark-users: Re: [Wireshark-users] TSHARK.EXE command line requirements with Filter are impossible in Windows. An

Wireshark-users: Re: [Wireshark-users] TSHARK.EXE command line requirements with Filter are impos

From: Guy Harris <guy@xxxxxxxxxxxx>

Date: Thu, 27 Dec 2007 15:53:54 -0800

Sake Blok wrote:

It works the other way around, you can use single quotes *around* a
filter expression that uses double quotes:

./tshark -r ~/traces/ssl-netcc.cap 'frame.time ge "Dec 21, 2007 20:39:47.750789000" && frame.time le "Dec 21, 2007 20:39:48.750789000"'

...at least with a UNIX-style shell. I'm not sure you can use singlequotes in cmd.exe to quote arguments.

Follow-Ups:
- Re: [Wireshark-users] TSHARK.EXE command line requirements with Filter are impossible in Windows. And (How to specify the Date Timestamp in an acceptable format.)
  - From: Jeroen Eeuwes

References:
- Re: [Wireshark-users] Specifying a date range in editcap
  - From: Andrew Chalk
- [Wireshark-users] TSHARK.EXE command line requirements with Filter are impossible in Windows. And (How to specify the Date Timestamp in an acceptable format.)
  - From: David DuPre
- Re: [Wireshark-users] TSHARK.EXE command line requirements with Filter are impossible in Windows. And (How to specify the Date Timestamp in an acceptable format.)
  - From: Sake Blok

Prev by Date: Re: [Wireshark-users] TSHARK.EXE command line requirements with Filter are impossible in Windows. And (How to specify the Date Timestamp in an acceptable format.)
Next by Date: Re: [Wireshark-users] Specifying a date range in editcap
Previous by thread: Re: [Wireshark-users] TSHARK.EXE command line requirements with Filter are impossible in Windows. And (How to specify the Date Timestamp in an acceptable format.)
Next by thread: Re: [Wireshark-users] TSHARK.EXE command line requirements with Filter are impossible in Windows. And (How to specify the Date Timestamp in an acceptable format.)
Index(es):
- Date
- Thread