diff options
author | Chuck Craft <bubbasnmp@gmail.com> | 2022-06-11 21:49:17 -0500 |
---|---|---|
committer | Gerald Combs <gerald@wireshark.org> | 2022-06-12 16:30:35 +0000 |
commit | f82ddef8d267510d97201314b8e5408cb9102ae5 (patch) | |
tree | f694ecf190770a12d3295a89282b775199cc37c5 | |
parent | 212abb7efebd1fa8f13fc0a1315a6a2d4b454d39 (diff) |
tshark/docs: add -X read_format: example to view file internals
-rw-r--r-- | doc/tshark.adoc | 11 |
1 files changed, 8 insertions, 3 deletions
diff --git a/doc/tshark.adoc b/doc/tshark.adoc index bdef730d93..ce934221f1 100644 --- a/doc/tshark.adoc +++ b/doc/tshark.adoc @@ -1133,8 +1133,13 @@ pass the string 'bar' to the second lua script, namely 'other.lua'. *read_format*:__file_format__ tells *TShark* to use the given file format to read in the file (the file given in the *-r* command option). Providing no -__file_format__ argument, or an invalid one, will produce a file of available -file formats to use. +__file_format__ argument, or an invalid one, will produce a list of available +file formats to use. For example, + + tshark -r rtcp_broken.pcapng -X read_format:"MIME Files Format" -V + +will display the internal file structure and allow access to the +`file-pcapng` fields. -- -y|--linktype <capture link type>:: @@ -1171,7 +1176,7 @@ is one) will be checked against this filter. + -- Automatically reset internal session when reached to specified number of packets. -for example, +For example, tshark -M 100000 |