Wireshark · Wireshark-users: Re: [Wireshark-users] TSHARK.EXE command line requirements with Filter are impossible in Windows. An

Wireshark-users: Re: [Wireshark-users] TSHARK.EXE command line requirements with Filter are impos

From: "Jeroen Eeuwes" <jeroeneeuwes@xxxxxxxxx>

Date: Fri, 28 Dec 2007 11:05:34 +0100

Hi Guy,

> ...at least with a UNIX-style shell.  I'm not sure you can use single
> quotes in cmd.exe to quote arguments.

Single quotes don't work. You can escape the quotes inside the qoutes
with a backslash. At least that works for tshark.exe, I'm not sure if
it will work for every program.

Eg:

C:\Program Files\Wireshark>tshark -r c:\in.pcap -w c:\out.pcap -R
"frame.time ge \"Nov 05, 2007 17:00:00\" && frame.time le \"Nov 05,
2007 18:00:00\""

Best regards,
Jeroen

References:
- Re: [Wireshark-users] Specifying a date range in editcap
  - From: Andrew Chalk
- [Wireshark-users] TSHARK.EXE command line requirements with Filter are impossible in Windows. And (How to specify the Date Timestamp in an acceptable format.)
  - From: David DuPre
- Re: [Wireshark-users] TSHARK.EXE command line requirements with Filter are impossible in Windows. And (How to specify the Date Timestamp in an acceptable format.)
  - From: Sake Blok
- Re: [Wireshark-users] TSHARK.EXE command line requirements with Filter are impossible in Windows. And (How to specify the Date Timestamp in an acceptable format.)
  - From: Guy Harris

Prev by Date: Re: [Wireshark-users] Specifying a date range in editcap
Next by Date: [Wireshark-users] Relabeling or defining "aliases" to packets
Previous by thread: Re: [Wireshark-users] TSHARK.EXE command line requirements with Filter are impossible in Windows. And (How to specify the Date Timestamp in an acceptable format.)
Next by thread: Re: [Wireshark-users] Specifying a date range in editcap
Index(es):
- Date
- Thread