aboutsummaryrefslogtreecommitdiffstats
path: root/doc/rawshark.pod
AgeCommit message (Collapse)AuthorFilesLines
2012-03-19Fix a typo or twoJeff Morriss1-2/+2
svn path=/trunk/; revision=41657
2012-03-19Add a new environment variable (WIRESHARK_ABORT_ON_OUT_OF_MEMORY) thatJeff Morriss1-3/+10
prevents OutOfMemory exceptions from being thrown. This makes it easier to debug such conditions. Set this variable in test-fuzzed-cap.sh but not in fuzz-test.sh; it's nice to see the friendly out-of-memory error message in the bug reports the latter script generates. svn path=/trunk/; revision=41656
2012-02-03The libpcap puts pcap-filter into the misc section (which seems to be 7).Jörg Mayer1-2/+2
Refer to pcap-filter and mention tcpdump only as a fallback. svn path=/trunk/; revision=40820
2011-05-29Remove an (almost) duplicate entryJörg Mayer1-3/+0
svn path=/trunk/; revision=37461
2010-10-20Add IPFIX_RECORDS_TO_CHECK to the environment variable section.Jeff Morriss1-0/+7
svn path=/trunk/; revision=34590
2010-10-15Revision 27919 added the ability to feed a libpcap-formatted file toGerald Combs1-2/+25
rawshark but broke the ability to feed it live packets with a pcap_pkthdr prefix on some 64-bit architectures. Add a "-p" flag which lets us explicitly handle file-based or memory-based packet record headers. svn path=/trunk/; revision=34522
2010-09-02Introduce 2 new environment variables: WIRESHARK_EP_VERIFY_POINTERS andJeff Morriss1-1/+15
WIRESHARK_SE_VERIFY_POINTERS that control whether or not we verify if a given pointer is ep_ or se_ allocated, respectively. Turn the behavior off by default for speed reasons (the speed difference isn't huge, but...). Turn the behavior on when fuzz testing. Document these two new variables in the man pages. svn path=/trunk/; revision=34046
2010-06-03From Reinhard Speyerer via bug 4779:Gerald Combs1-4/+5
From reading the rawshark(1) manpage my assumption was that rawshark could be used like $ /usr/bml/bin/rawshark -s -r test.pcap -d encap:EN10MB ... However rawshark either expects the -r argument to be - (read from stdin) or a pipe which results in the following error message: rawshark: ".../test.pcap" is neither an interface nor a pipe The proposed rawshark.pod patch updates the -r description to the implemented rawshark functionality. The patch also applies to the current SVN version. svn path=/trunk/; revision=33063
2010-04-14In the section on WIRESHARK_ABORT_ON_DISSECTOR_BUG, give the name of theGuy Harris1-5/+8
program the man page describes, and give a bit more detail. svn path=/trunk/; revision=32458
2010-04-13Add an entry to the environment variable section about ↵Jeff Morriss1-0/+8
WIRESHARK_ABORT_ON_DISSECTOR_BUG svn path=/trunk/; revision=32457
2010-04-12Point out that hostname and MAC address resolution in capture filters will notJeff Morriss1-0/+8
use any of the Wireshark "personal" files. This helps to address the complaint in: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2904 svn path=/trunk/; revision=32452
2010-02-24Add descriptions of a few more environment variables that affect *shark's ↵Jeff Morriss1-0/+26
operation svn path=/trunk/; revision=31973
2009-12-28Remove repeated blank lines which caused the pod processor to not recognize ↵Bill Meier1-1/+0
the following pod directive. svn path=/trunk/; revision=31372
2009-10-20Take a stab at adding a section on environment variables that affect ↵Jeff Morriss1-0/+39
*shark's behavior. So far, all the emem variables are included. svn path=/trunk/; revision=30648
2009-05-12SYNOPSYS --> SYNOPSISBill Meier1-1/+1
svn path=/trunk/; revision=28338
2009-04-01Describe the format of libpcap records a little better - no, it's notGuy Harris1-1/+3
valid C89, but it's more accurate (and lets you know that the packet data has only caplen bytes). Fix up a list. svn path=/trunk/; revision=27925
2009-03-31Rawshark fixes from Duncan Salerno.Gerald Combs1-8/+7
svn path=/trunk/; revision=27919
2009-02-23Have the minimum snapshot length be 1 byte, and have a snapshot lengthGuy Harris1-2/+3
of 0 mean 65535, similar to what tcpdump does. Fixes bug 2731. svn path=/trunk/; revision=27526
2008-03-07Make some text verbatim.Gerald Combs1-16/+16
svn path=/trunk/; revision=24585
2008-02-16Remove extra copies of the content.Gerald Combs1-1127/+0
svn path=/trunk/; revision=24362
2008-02-15Add rawshark, a utility that, when given raw pcap-formatted packets andGerald Combs1-0/+1504
a list of fields, prints the field values found in each packet. Packet data can be specified as a libpcap DLT, e.g. "EN10MB" or an upper-layer protocol, e.g. "http". svn path=/trunk/; revision=24339
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-25 17:35:55 +0000