diff options
| author | Guy Harris <gharris@sonic.net> | 2022-01-31 21:31:48 -0800 |
|---|---|---|
| committer | Guy Harris <gharris@sonic.net> | 2022-01-31 21:31:48 -0800 |
| commit | 08dc06027f6db9320dbd5820aea57e10b40344d0 (patch) | |
| tree | 7469e65602e0535410cfaae468911a6c8fb0b72c | |
| parent | dc16d91c37e855f11181c258b7211dc4b14bbd0d (diff) | |
TShark, Wireshark: add some more documentation of "-i TCP@<host>:<port>".
Add a mention of the meaning of the "TCP@<host>:<port>" syntax in the
text about the -i option.
| -rw-r--r-- | doc/tshark.adoc | 3 | ||||
| -rw-r--r-- | doc/wireshark.adoc | 5 |
2 files changed, 7 insertions, 1 deletions
diff --git a/doc/tshark.adoc b/doc/tshark.adoc index 8dfe4c63bb..713ac39d6e 100644 --- a/doc/tshark.adoc +++ b/doc/tshark.adoc @@ -599,6 +599,9 @@ of the form "\\pipe\.\*pipename*". Data read from pipes must be in standard pcapng or pcap format. Pcapng data must have the same endianness as the capturing host. +"TCP@<host>:<port>" causes *TShark* to attempt to connect to the +specified port on the specified host and read pcapng or pcap data. + This option can occur multiple times. When capturing from multiple interfaces, the capture file will be saved in pcapng format. -- diff --git a/doc/wireshark.adoc b/doc/wireshark.adoc index e586a4cbbe..455bddbd51 100644 --- a/doc/wireshark.adoc +++ b/doc/wireshark.adoc @@ -406,7 +406,7 @@ Network interface names should match one of the names listed in "*wireshark -D*" (described above); a number, as reported by "*wireshark -D*", can also be used. If you're using UNIX, "*netstat -i*", "*ifconfig -a*" or "*ip link*" might also work to list interface names, -although not all versions of UNIX support the *-a* flag to *ifconfig*. +although not all versions of UNIX support the *-a* option to *ifconfig*. If no interface is specified, *Wireshark* searches the list of interfaces, choosing the first non-loopback interface if there are any @@ -420,6 +420,9 @@ of the form "\\pipe\.\*pipename*". Data read from pipes must be in standard pcapng or pcap format. Pcapng data must have the same endianness as the capturing host. +"TCP@<host>:<port>" causes *Wireshark* to attempt to connect to the +specified port on the specified host and read pcapng or pcap data. + This option can occur multiple times. When capturing from multiple interfaces, the capture file will be saved in pcapng format. -- |