diff options
| author | Gerald Combs <gerald@wireshark.org> | 2011-12-27 20:35:41 +0000 |
|---|---|---|
| committer | Gerald Combs <gerald@wireshark.org> | 2011-12-27 20:35:41 +0000 |
| commit | 3c1b8a6ca13f6c0d0ce035859b12f0be9daca4f7 (patch) | |
| tree | 97a0a11cc063f2d0fccb3a6a439870ee0b1fa999 /doc/wireshark-filter.pod | |
| parent | 727046dc35c535c13c06ac82d1132618d0f24ad0 (diff) | |
Add a "-G ftypes" option, which dumps our supprted FT_… names and
descriptions. Captitalize and fix up the descriptions. Use its output to
create the field type list in the wireshark-filter man page.
svn path=/trunk/; revision=40306
Diffstat (limited to 'doc/wireshark-filter.pod')
| -rw-r--r-- | doc/wireshark-filter.pod | 22 |
1 files changed, 16 insertions, 6 deletions
diff --git a/doc/wireshark-filter.pod b/doc/wireshark-filter.pod index 1491014426..8b9e62153b 100644 --- a/doc/wireshark-filter.pod +++ b/doc/wireshark-filter.pod @@ -107,16 +107,26 @@ comparisons. For example: Each protocol field is typed. The types are: - Unsigned integer (8-bit, 16-bit, 24-bit, or 32-bit) - Signed integer (8-bit, 16-bit, 24-bit, or 32-bit) + ASN.1 object identifier Boolean - Ethernet address (6 bytes) - Byte array + Character string + Compiled Perl-Compatible Regular Expression (GRegex) object + Date and time + Ethernet or other MAC address + EUI64 address + Floating point (double-precision) + Floating point (single-precision) + Frame number + Globally Unique Identifier IPv4 address IPv6 address IPX network number - Text string - Double-precision floating point number + Label + Protocol + Sequence of bytes + Signed integer, 1, 2, 3, 4, or 8 bytes + Time offset + Unsigned integer, 1, 2, 3, 4, or 8 bytes An integer may be expressed in decimal, octal, or hexadecimal notation. The following three display filters are equivalent: |