path: root/doc/tshark.pod
diff options
authorMichael Mann <mmann78@netscape.net>2017-09-21 23:20:03 -0400
committerAnders Broman <a.broman58@gmail.com>2017-09-22 04:49:48 +0000
commit5f667694d3bbd57f13c26d3588d5671dfd30d09a (patch)
treee3dbdd8cf9c62acc73b51bc3895ed8b6f3f14ca8 /doc/tshark.pod
parent620d54b1e3a4fcad1994409013f6a5b2b76913b4 (diff)
Add Flow Graph functionality to TShark
Add flow graph functionality to tshark through -z option. Output is same as ASCII format saved from GUI. Change-Id: Iee0bfea7215858e6488b4728581be28287e9ea1a Reviewed-on: https://code.wireshark.org/review/23652 Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
Diffstat (limited to 'doc/tshark.pod')
1 files changed, 20 insertions, 0 deletions
diff --git a/doc/tshark.pod b/doc/tshark.pod
index 185409468d..67c538544e 100644
--- a/doc/tshark.pod
+++ b/doc/tshark.pod
@@ -1109,6 +1109,26 @@ on those calls that match that filter.
Example: B<-z "expert,note,tcp"> will only collect expert items for frames that
include the tcp protocol, with a severity of note or higher.
+=item B<-z> flow,I<name>,I<mode>,[I<filter>]
+Displays the flow of data between two nodes. Output is the same as ASCII format
+saved from GUI.
+I<name> specifies the flow name. It can be one of:
+ any All frames
+ icmp ICMP
+ icmpv6 ICMPv6
+ lbm_uim UIM
+ tcp TCP
+I<mode> specifies the address type. It can be one of:
+ standard Any address
+ network Network address
+Example: B<-z flow,tcp,network> will show data flow for all TCP frames
=item B<-z> follow,I<prot>,I<mode>,I<filter>[I<,range>]
Displays the contents of a TCP or UDP stream between two nodes. The data