aboutsummaryrefslogtreecommitdiffstats
path: root/doc/rawshark.pod
diff options
context:
space:
mode:
authorGuy Harris <guy@alum.mit.edu>2009-04-01 20:52:53 +0000
committerGuy Harris <guy@alum.mit.edu>2009-04-01 20:52:53 +0000
commit96812ede55cd7058a69e9e8f4d38dcf4f058f9e2 (patch)
tree78f690d73f63c80e2fa77b084ba883a70dc42163 /doc/rawshark.pod
parent4ba5d2f92ba094653a66433a568b1dbfa6b9ee7c (diff)
Describe the format of libpcap records a little better - no, it's not
valid C89, but it's more accurate (and lets you know that the packet data has only caplen bytes). Fix up a list. svn path=/trunk/; revision=27925
Diffstat (limited to 'doc/rawshark.pod')
-rw-r--r--doc/rawshark.pod4
1 files changed, 3 insertions, 1 deletions
diff --git a/doc/rawshark.pod b/doc/rawshark.pod
index 8d8db1d8c7..439c88ddbf 100644
--- a/doc/rawshark.pod
+++ b/doc/rawshark.pod
@@ -42,7 +42,7 @@ matches the pcap_pkthdr struct and packet data used in libpcap.
uint32_t ts_usec; /* Time stamp (microseconds) */
uint32_t caplen; /* Length of the packet buffer */
uint32_t len; /* "On the wire" length of the packet */
- uint8_t *data; /* Packet data */
+ uint8_t data[caplen]; /* Packet data */
};
=head1 OUTPUT
@@ -179,7 +179,9 @@ are supported:
=over 4
B<%D> Field name or description, e.g. "Type" for dns.qry.type
+
B<%N> Base 10 numeric value of the field.
+
B<%S> String value of the field.
=back