path: root/doc/tshark.pod
diff options
authorHessam Jalali <hessam.jalali@gmail.com>2017-04-24 17:31:00 +0430
committerMichael Mann <mmann78@netscape.net>2017-05-05 00:51:58 +0000
commitdd884611ac69f1c671bf11a8c57267dd629fd803 (patch)
tree6894b418f60171305655592a0822bd002d90f1b1 /doc/tshark.pod
parent8e52cfb891aa5de7b20f5dbd8471609e6c6ca40d (diff)
Auto reset epan session
Automatically resets intarnal epan session after reaching to specified number of packets, for example -M 1000 will reset the session every 1000 packets. this is more like a proposal since the usage is very specific it is useful for 24/7 live capture with dissection and sending data directly to another application. example: tshark -Y "gtp" -M 100000 -T fields -e gtp.message -e gtp.teid Change-Id: I8ee8b0380017c684120a93cb3fb43f41615a9c04 Reviewed-on: https://code.wireshark.org/review/21312 Reviewed-by: Evan Huus <eapache@gmail.com> Petri-Dish: Evan Huus <eapache@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
Diffstat (limited to 'doc/tshark.pod')
1 files changed, 12 insertions, 0 deletions
diff --git a/doc/tshark.pod b/doc/tshark.pod
index 100049609d..e6034f64ac 100644
--- a/doc/tshark.pod
+++ b/doc/tshark.pod
@@ -51,6 +51,7 @@ S<[ B<-x> ]>
S<[ B<-X> E<lt>eXtension optionE<gt>]>
S<[ B<-y> E<lt>capture link typeE<gt> ]>
S<[ B<-Y> E<lt>displaY filterE<gt> ]>
+S<[ B<-M> E<lt>auto session resetE<gt> ]>
S<[ B<-z> E<lt>statisticsE<gt> ]>
S<[ B<--capture-comment> E<lt>commentE<gt> ]>
S<[ B<--export-objects> E<lt>protocolE<gt>,E<lt>destdirE<gt> ]>
@@ -904,6 +905,17 @@ Use this instead of -R for filtering using single-pass analysis. If doing
two-pass analysis (see -2) then only packets matching the read filter (if there
is one) will be checked against this filter.
+=item -M E<lt>auto session resetE<gt>
+Automatically reset internal session when reached to specified number of packets.
+for example,
+ -M 100000
+will reset session every 100000 packets.
+This feature does not support -2 two-pass analysis
=item -z E<lt>statisticsE<gt>
Get B<TShark> to collect various types of statistics and display the result