Wireshark mailing list archives
Re: tshark smb,srt filter error
From: Evan Huus <eapache () gmail com>
Date: Sun, 20 Oct 2013 13:05:16 -0400
On Sun, Oct 20, 2013 at 1:47 AM, Tal Bar-Or <tbaror () gmail com> wrote:
Hi All, i am trying to get some smb statistics for certain file using tshark for scripting propose , i think i am using the correct syntax but still getting errors as follows below even if i remove the \ i get invalid - "New" was unexpected in this context. Please advice ThanksC:\traces_test>"c:\Program Files\Wireshark\tshark.exe" -n -r tracesmb_fileop1.pcap -q -z "smb,srt,smb.file==\\New Video 12_20196.xml" tshark: Couldn't register smb,srt tap: Filter "smb.file==\New Video 12_20196.xml" is invalid - "\" was unexpected in this context.-- Tal Bar-or
Hi Tal, Just guessing, but I think you probably need to add quotes around the file-name string. Does "smb,srt,smb.file==\"\\New Video 12_20196.xml\"" work? Evan ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- tshark smb,srt filter error Tal Bar-Or (Oct 19)
- Re: tshark smb,srt filter error Evan Huus (Oct 20)
- Re: tshark smb,srt filter error Tal Bar-Or (Oct 20)
- Re: tshark smb,srt filter error Tal Bar-Or (Oct 20)
- Re: tshark smb,srt filter error Evan Huus (Oct 20)
- Re: tshark smb,srt filter error Evan Huus (Oct 20)
- Re: tshark smb,srt filter error Tal Bar-Or (Oct 20)
- Re: tshark smb,srt filter error Guy Harris (Oct 20)
- Re: tshark smb,srt filter error Evan Huus (Oct 20)
- Re: tshark smb,srt filter error Guy Harris (Oct 20)
- Re: tshark smb,srt filter error Evan Huus (Oct 20)
- Re: tshark smb,srt filter error Jim Young (Oct 20)
- Re: tshark smb,srt filter error Kevin R. Cullimore (Oct 21)
- Re: tshark smb,srt filter error Evan Huus (Oct 20)