Solved

Need help with a tshark filter.

Posted on 2010-08-17
4
695 Views
Last Modified: 2012-05-10
I am using Wireshark to capture network traffic to a file, using the filter 'no arp no broadcast no multicast host 10.20.30.40'.  I would like to use tshark to do the capture to a file instead.  This same filter generates errors when it is used in tshark.  What would the equivalent Tshark filter be?
0
Comment
Question by:CousinDupree
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 12

Accepted Solution

by:
hfraser earned 500 total points
ID: 33460994
The syntax should be:

not arp and not broadcast and not multicast and host 10.20.30.40
0
 

Author Comment

by:CousinDupree
ID: 33461109
My apologies, 'not arp and not broadcast and not multicast and host 10.20.30.40' is indeed the filter that I am using.  It doesn't work in Tshark, however.
0
 
LVL 12

Expert Comment

by:hfraser
ID: 33463051
This is the correct syntax for the filter, if that's where the problem is. What error are you getting?
0
 

Author Closing Comment

by:CousinDupree
ID: 33500414
My command line syntax was incorrect, your answer was correct..  Thanks for the help!
0

Featured Post

Are You Using the Best Web Development Editor?

The worlds of web hosting and web development are constantly evolving. Every year we see design trends change, coding standards adapt and new frameworks/CMS created. With such a quick pace of change it’s easy to get lost trying to keep up.

See if your editor made the list.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Short answer to this question: there is no effective WiFi manager in iOS devices as seen in Windows WiFi or Macbook OSx WiFi management, but this article will try and provide some amicable solutions to better suite your needs.
This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question