diff options
| author | Gerald Combs <gerald@wireshark.org> | 2008-03-07 23:44:40 +0000 |
|---|---|---|
| committer | Gerald Combs <gerald@wireshark.org> | 2008-03-07 23:44:40 +0000 |
| commit | 71d81e88b1bf1524cfb6cf4cc353abccd107cff6 (patch) | |
| tree | 1671955fd4dba02a2139e95dbfd63174aa27a0d5 /doc/rawshark.pod | |
| parent | 9c283999302a3ff2073c8f4276e5d7d33d77c396 (diff) | |
Make some text verbatim.
svn path=/trunk/; revision=24585
Diffstat (limited to 'doc/rawshark.pod')
| -rw-r--r-- | doc/rawshark.pod | 32 |
1 files changed, 16 insertions, 16 deletions
diff --git a/doc/rawshark.pod b/doc/rawshark.pod index 20ed4e9984..cfe942b2ec 100644 --- a/doc/rawshark.pod +++ b/doc/rawshark.pod @@ -36,12 +36,12 @@ B<Wireshark> and B<TShark>. B<Rawshark> expects input records with the following format. Note that this matches the pcap_pkthdr struct and packet data used in libpcap. -struct rawshark_rec_s { - struct timeval ts; /* Time stamp */ - uint32_t caplen; /* Length of the packet buffer */ - uint32_t len; /* "On the wire" length of the packet */ - uint8_t *data; /* Packet data */ -}; + struct rawshark_rec_s { + struct timeval ts; /* Time stamp */ + uint32_t caplen; /* Length of the packet buffer */ + uint32_t len; /* "On the wire" length of the packet */ + uint8_t *data; /* Packet data */ + }; =head1 OUTPUT @@ -53,20 +53,20 @@ display filter. A "-" is used to signal the end of a field description and at the end of each packet line. For example, the flags B<-F ip.src -F dns.qry.type> might generate the following output: -0 FT_IPv4 BASE_NONE - 1 FT_UINT16 BASE_HEX - -1 1="1" 0="192.168.77.10" 1 - -2 1="1" 0="192.168.77.250" 1 - -3 0="192.168.77.10" 1 - -4 0="74.125.19.104" 1 - + 0 FT_IPv4 BASE_NONE - 1 FT_UINT16 BASE_HEX - + 1 1="1" 0="192.168.77.10" 1 - + 2 1="1" 0="192.168.77.250" 1 - + 3 0="192.168.77.10" 1 - + 4 0="74.125.19.104" 1 - Note that packets 1 and 2 are DNS queries, and 3 and 4 are not. Adding B<-R "not dns"> still prints each line, but there's an indication that packets 1 and 2 didn't pass the filter: -0 FT_IPv4 BASE_NONE - 1 FT_UINT16 BASE_HEX - -1 1="1" 0="192.168.77.10" 0 - -2 1="1" 0="192.168.77.250" 0 - -3 0="192.168.77.10" 1 - -4 0="74.125.19.104" 1 - + 0 FT_IPv4 BASE_NONE - 1 FT_UINT16 BASE_HEX - + 1 1="1" 0="192.168.77.10" 0 - + 2 1="1" 0="192.168.77.250" 0 - + 3 0="192.168.77.10" 1 - + 4 0="74.125.19.104" 1 - Also note that the output may be in any order, and that multiple matching fields might be displayed. |