diff options
author | Gerald Combs <gerald@wireshark.org> | 2008-12-18 23:25:50 +0000 |
---|---|---|
committer | Gerald Combs <gerald@wireshark.org> | 2008-12-18 23:25:50 +0000 |
commit | 37c36dba55ab59b1ae6c1ceb3c564de2d6b745b3 (patch) | |
tree | 2dd553c928da861dcb123c5ab5b1ed03ed520e4d /doc | |
parent | 15274ad66410f6c5566da685234da70565803e0e (diff) |
Describe the "-d" option a little more clearly.
svn path=/trunk/; revision=27055
Diffstat (limited to 'doc')
-rw-r--r-- | doc/tshark.pod | 15 |
1 files changed, 12 insertions, 3 deletions
diff --git a/doc/tshark.pod b/doc/tshark.pod index 38db46115f..b69cfbae8b 100644 --- a/doc/tshark.pod +++ b/doc/tshark.pod @@ -192,13 +192,22 @@ Run with the given configuration profile. =item -d E<lt>layer typeE<gt>==E<lt>selectorE<gt>,E<lt>decode-as protocolE<gt> -Specify that if the layer type in question (for example, B<tcp.port> or -B<udp.port> for a TCP or UDP port number) has the specified selector -value, packets should be dissected as the specified protocol. +Like Wireshark's B<Decode As...> feature, this lets you specify how a +layer type should be dissected. If the layer type in question (for example, +B<tcp.port> or B<udp.port> for a TCP or UDP port number) has the specified +selector value, packets should be dissected as the specified protocol. Example: B<-d tcp.port==8888,http> will decode any traffic running over TCP port 8888 as HTTP. +Using an invalid selector or protocol will print out a list of valid selectors +and protocol names, respectively. + +Example: B<-d .> is a quick way to get a list of valid selectors. + +Example: B<-d ethertype==0x0800.> is a quick way to get a list of protocols that can be +selected with an ethertype. + =item -D Print a list of the interfaces on which B<TShark> can capture, and |