Apply read filter while writing to file

[Muhammad El-Sergani <msergani () gmail com>]

Hello all,

After a recent Wireshark update on one of our SIP servers, we are unable to
apply a read filter while writing the capture file, but rather have to
capture everything to a host, write that to a file then apply our read
filters when reading from the file.

This is hard to maintain as our SIP traffic is huge, and just capturing
everything is unpractical.

Is there a known/method/practice/script that can be used to allow users to
apply a read filter to a trace session while writing the dump to a file?

Everything is Linux based.

Thanks
 in advance!
//M

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe