You're really using the "contains" keyword? That's for strings and binary strings.
The spaces in your filter are probably confusing the shell when you invoke wireshark/tshark from the command-line. Are you running on Unix? Use single quotes around your filter: tshark ............ 'udp contains xxx' --gilbert On 7/2/07, Amit Paliwal <[EMAIL PROTECTED]> wrote: > > I want to set command line filter expression for proprietary protocol that > is registered over UDP by its name. I am able to do it directly in Wireshark > GUI by setting the expression as "UDP contains my_protocol", but I need to > do the same from command line that I am unable to do right now. > > Please suggest. > > Regards, > > ______________________________________________________________________ > > _______________________________________________ > Wireshark-dev mailing list > [email protected] > http://www.wireshark.org/mailman/listinfo/wireshark-dev > > _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
