Re: question about exporting/filtering files

[Richard Bejtlich <taosecurity () gmail com>]

On Wed, Dec 2, 2009 at 2:35 PM, Gerald Combs <gerald () wireshark org> wrote:
> Richard Bejtlich wrote:
>
> > Any rationale for why the display filter can be used to limit -w to
> > only the packet of interest when used with -r , but not when doing
> > live capture?
>
> It's a by-product of privilege separation, and is a bug:
>
> https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2234

I see -- very interesting!  Thank you!

Richard
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe