Wireshark · Wireshark-users: Re: [Wireshark-users] Tshark - displaying all sdp.media_attr on win2k system

[Christopher Maynard <Chris.Maynard@xxxxxxxxx>]

Christopher Maynard <Chris.Maynard@...> writes:

> > Any thoughts? Or am I out of luck?
> 
> You might be able to use something like: tshark -R "frame contains FOO"
> or even: tshark -R "sdp.media_attr && frame contains FOO"

Of course that will only help you find the packets that contain what you're
looking for, but it won't print the fields, so you could also try using "-V" to
print out all the packet details, redirect the output to a file, then grep for
your matching "Media Attribute" lines that way?