While troubleshooting a MySQL issue, I came across this command at commandlinefu:
tshark -i any -T fields -R mysql.query -e mysql.query
I am trying to understand it before I actually use it. Looking at the man page helped me understand the options used. The MySQL filter documentation was also helpful. However, how can I actually see what the filter looks like? I'm assuming all the filters are saved in a directory somewhere. Is this assumption incorrect?