aboutsummaryrefslogtreecommitdiffstats
path: root/doc/text2pcap.pod
AgeCommit message (Collapse)AuthorFilesLines
2019-07-20Documentation: convert http URLS to httpsPeter Wu1-2/+2
Remove some dead links or point them to archive.org while at it. All updated links have been verified. Change-Id: Icf02167a13d5fe9dfce39ea57525b3f185554c9d Reviewed-on: https://code.wireshark.org/review/34028 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-12-13text2pcap: allow to set interface nameJaap Keuter1-0/+6
When generating a capture file from a text file it can be helpfull to be able to set the capture interface name in the generated IDB. This can be especially true if later on the generated captures are merged and the individual IDB's have to be compared. Without a name every IDB of the same datalink type will be equal and subject to merge. Also it keeps the individual streams identifiable for the end user. Change-Id: I70224379d88f516a0a356bf0b46aebafb69665f0 Signed-off-by: Jaap Keuter <jaap.keuter@xs4all.nl> Reviewed-on: https://code.wireshark.org/review/31015 Tested-by: Petri Dish Buildbot Reviewed-by: Peter Wu <peter@lekensteyn.nl>
2018-12-07PCAP/PCAPNG: Be consistent in documentation, etcJaap Keuter1-1/+1
1) The default build configuration is to select PCAPNG as output format, but it can be selected as PCAP. Some of the command line tools have the option to select the output format and default towards the build configuration. This has to be reflected in their help output also. 2) Various documentation files are still stating that PCAP is the default format of various tools. With the default build configuration being PCAPNG these have to be adjusted as well. (with lack of dynamic content the documentation can only refer to the default build configuration format). Change-Id: I51d19642a7ed8c99817971c1f25d20972095021e Signed-off-by: Jaap Keuter <jaap.keuter@xs4all.nl> Reviewed-on: https://code.wireshark.org/review/30951 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-11-21Update text2pcap documentationJaap Keuter1-4/+6
Various parts of the text2pcap documentation need some fixing up. This change brings them back in line and up to date with current features. Change-Id: I038cf5c4943d2a4bbcc3d0fbd8f5e111dcf0d0a9 Signed-off-by: Jaap Keuter <jaap.keuter@xs4all.nl> Reviewed-on: https://code.wireshark.org/review/30754 Tested-by: Petri Dish Buildbot Reviewed-by: Peter Wu <peter@lekensteyn.nl>
2018-08-18Docs: Make our Pod documentation encoding uniform.Gerald Combs1-0/+5
We've set "=encoding utf8" in wireshark.pod for a long time. Do so in the rest of our .pod files. Change-Id: I3ef0fb3a88ed63275b4ff4362b6afbf13d79a0bc Reviewed-on: https://code.wireshark.org/review/29182 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
2018-01-09Use pcapng as the name of the file format.Guy Harris1-2/+2
At one point, I remember a discussion resulting in the official name of the next-generation replacement for pcap format being changed to "pcapng", with no hyphen. Make Wireshark reflect that. Change-Id: Ie66fb13a0fe3a8682143106dab601952e9154e2a Reviewed-on: https://code.wireshark.org/review/25214 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-03-28text2pcap: define max packet size to WTAP_MAX_PACKET_SIZEPascal Quantin1-1/+1
Change-Id: I73ab87032e4a0c0259227622412be36aaf66a9d6 Reviewed-on: https://code.wireshark.org/review/20758 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2016-08-03Text2Pcap doc updateGraham Bloice1-0/+3
Minor docs update Change-Id: Iea44e4963aab75db1d875d27af41e4f38ff74e2d Reviewed-on: https://code.wireshark.org/review/16859 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2016-08-03Text2Pcap docs updateGraham Bloice1-5/+7
Minor update to docs Change-Id: If9464f00d69bb9a8bb5638f3bb0d0f73a56aad50 Reviewed-on: https://code.wireshark.org/review/16856 Reviewed-by: Graham Bloice <graham.bloice@trihedral.com>
2016-01-16doc: fix spelling-error-in-manpage found by lintianAlexis La Goutte1-1/+1
Change-Id: I848159f0c960e0e8ece09c7c96dda6deb0ec6046 Reviewed-on: https://code.wireshark.org/review/13329 Reviewed-by: Dario Lombardo <lomato@gmail.com> Petri-Dish: Dario Lombardo <lomato@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2015-01-16Spaces separate bytes; they don't have to surround them.Guy Harris1-6/+7
I.e., you don't need a trailing blank, at least not with the current version (and there shouldn't be a requirement for such an extra trailing blank). Change-Id: Ia2b732c74fc6020acc01a2c0c52ed3567d36d762 Reviewed-on: https://code.wireshark.org/review/6575 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2014-09-17Update the doc directory to use https://www.wireshark.org.Gerald Combs1-1/+1
Change-Id: I9bfc57cb6b6ab6962b80ff58d98eb351d6f69829 Reviewed-on: https://code.wireshark.org/review/4140 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2014-06-21Add command-line argument to request the version to a number of the utilities.Jeff Morriss1-1/+6
In some cases "-v" was already used so "-V" is the option. Note that the version information in these utilities is much shorter than what is presented by the big programs. As requested by https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5804 Bug: 5804 Change-Id: I35db35a4eace2797afd895f9be7322ef39928480 Reviewed-on: https://code.wireshark.org/review/2489 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2013-12-26Since the documentation states that, "Text2pcap understands a hexdump of the ↵Chris Maynard1-7/+5
form generated by od -Ax -tx1 -v.", supply an example that actually matches that format. In addition, change the hex bytes so that they represent a valid, well-formed packet, rather than a malformed RSVP packet. This should allow a user to more clearly verify that the text2pcap converstion worked as expected in the event he/she desires to test text2pcap using the example provided. svn path=/trunk/; revision=54454
2013-09-11Add a link to IANA's Assigned Internet Protocol Numbers page.Chris Maynard1-1/+3
svn path=/trunk/; revision=51950
2013-07-29The argument to the -l flag to text2pcap is a LINKTYPE_ value, not aGuy Harris1-3/+3
DLT_ value, which is good because it's a numerical value and the numerical values for some link-layer header types are OS-dependent, but the numerical values for all LINKTYPE_ values are OS-independent. Use LINKTYPE_RAW, not the value for the DLT_RAW on some but not all OSes, for raw IP. Also, 7 is LINKTYPE_ARCNET_BSD, emphasis on the "_BSD"; there's also a Linux encapsulation for ARCNet that is different. Note that it's the BSD flavor. svn path=/trunk/; revision=51005
2013-07-28If a core Wireshark developer repeatedly can't remember that theGuy Harris1-1/+1
argument to the -F flag for pcap format is "libpcap", not "pcap", we have a problem. Make it "pcap", and add a backwards-compatibility hack to support using "libpcap" as well. Update the man pages to refer to it as pcap as well, and fix the capitalization of "WinPcap" (see http://www.winpcap.org) while we're at it. Also, refer to http://www.tcpdump.org/linktypes.html for the list of link-layer header types for pcap and pcap-ng. svn path=/trunk/; revision=50989
2013-06-16Prepend custom Destination IP and Source IP (ipv4 or ipv6) in the pcap. Bug ↵Michael Mann1-0/+15
5650 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5650) svn path=/trunk/; revision=49964
2013-05-20If tcpdump doesn't exist, why refer to it? Omit this confusing phrase.Chris Maynard1-1/+1
svn path=/trunk/; revision=49427
2013-04-04As forewarned at ↵Chris Maynard1-1/+1
http://www.wireshark.org/lists/wireshark-dev/201304/msg00009.html, change the default snaplen to 65KiB-1. While we're at it, push the max packet size to that value as well. Also: convert the few tabs to spaces and add modelines. svn path=/trunk/; revision=48738
2012-12-25Add support for -D option. The preamble will start withMichael Tüxen1-0/+7
an I or O indicating the direction of the packet. This will be stored in the generated file if the pcap-ng format is used. Thanks to Jaap for suggesting to integrate this into the preamble! svn path=/trunk/; revision=46744
2012-12-25Add option to suppress duplicate suppression.Michael Tüxen1-1/+1
svn path=/trunk/; revision=46730
2012-12-22Add support for writing pcap-ng files by specifying -n as an option.Michael Tüxen1-0/+5
Leave pcap the default file format for now. The is should be reconsidered before the next release as it might make sense to use pcapgn as the default as we do for dumpcap. (We can use the -P option to allow switching back to pcap). svn path=/trunk/; revision=46691
2012-03-15Sort the options.Chris Maynard1-45/+45
svn path=/trunk/; revision=41566
2012-02-03The libpcap puts pcap-filter into the misc section (which seems to be 7).Jörg Mayer1-10/+10
Refer to pcap-filter and mention tcpdump only as a fallback. svn path=/trunk/; revision=40820
2011-10-23Speak of a "link-layer header type" rather than a "link-layer type"; aGuy Harris1-5/+6
given link-layer type, e.g. 802.11, might have multiple header types (802.11, 802.11 plus various radio headers, Ethernet), and multiple link-layer types might have the same header type (802.11 interfaces might supply Ethernet headers, and Linux loopback interfaces supply Ethernet headers as well). Point to tcpdump.org's page of link-layer header types, rather than to the net/bpf.h header that 1) might not exist on your system and 2) might not be up-to-date if it does exist. svn path=/trunk/; revision=39529
2011-09-05From Pascal Quantin via bug 1723:Stig Bjørlykke1-0/+8
Make ASCII text dump identification optional. svn path=/trunk/; revision=38886
2010-11-19Make some updates to describe the newer features.Jaap Keuter1-4/+7
svn path=/trunk/; revision=34964
2010-11-09Fixed typos.Chris Maynard1-2/+2
svn path=/trunk/; revision=34816
2009-05-12SYNOPSYS --> SYNOPSISBill Meier1-1/+1
svn path=/trunk/; revision=28338
2009-05-12Update man pages; Add several missing options; Fix typos, Do minor rewording; Bill Meier1-13/+13
editcap: Add description of -i option; dumpcap: Add description of -S option; svn path=/trunk/; revision=28336
2008-06-16Fix for bug 2611:Jaap Keuter1-1/+1
Add -v option to example "od" command line. svn path=/trunk/; revision=25458
2008-02-05Document the "-o dec" changes.Stig Bjørlykke1-5/+5
svn path=/trunk/; revision=24273
2007-09-20When -t option: Use current date or time fields for unspecified fields; ↵Bill Meier1-0/+3
Fixes bug #1836. svn path=/trunk/; revision=22916
2006-08-10Add some programs to 'see also'Jörg Mayer1-1/+2
svn path=/trunk/; revision=18867
2006-07-09Use L<> on all links.Guy Harris1-3/+3
Don't use anything on man page references - pod2man handles that. Don't refer to "the capture file format section" of the Wireshark man page, as there's no section explicitly labelled as such; just refer to the beginning of the DESCRIPTION section. svn path=/trunk/; revision=18694
2006-05-31Rename the main executable to "wireshark", along with more conversions:Gerald Combs1-5/+5
ethereal.com -> wireshark.org mailing lists and addresses ETHEREAL -> WIRESHARK Man pages Automake/Autoconf names svn path=/trunk/; revision=18271
2006-03-20Provide options to work with defaults of text2pcap.Jaap Keuter1-2/+2
svn path=/trunk/; revision=17682
2006-01-11add <> to the option parametersUlf Lamping1-21/+21
svn path=/trunk/; revision=17004
2005-09-02text2pcap can add fake SCTP headers.Guy Harris1-7/+6
svn path=/trunk/; revision=15670
2004-04-25build a list of the input file formats instead of a floating text,Ulf Lamping1-0/+2
added program names to HTML titles, various minor fixes svn path=/trunk/; revision=10686
2003-04-27Clean up the example for the "-m" flag.Guy Harris1-1/+3
svn path=/trunk/; revision=7573
2003-04-27From Matthijs Melchior:Guy Harris1-2/+22
- added option -m to set maximum packet length - added option -T to generate TCP headers - UDP headers now have a correct checksum - default capture timestamp is current time, usec field counts packets - UDP and TCP headers are mutually exclusive - changed etherenet addresses, now sends from 1 -> 2 .... svn path=/trunk/; revision=7571
2003-03-10Obscure more email addresses.Gerald Combs1-1/+1
svn path=/trunk/; revision=7334
2002-07-21Mention the "-h" flag.Guy Harris1-1/+6
Fix up the list of arguments to "-S" in the synopsis. svn path=/trunk/; revision=5900
2002-04-13From Michael Tuexen:Guy Harris1-11/+17
The -S option has been changed such that the payload protocol identifier can be specified instead of the verification tag. The error messages for -s -S have been corrected. Update the text2pcap man page to reflect the "-S" change. svn path=/trunk/; revision=5150
2002-03-26From Andrew Feren:Guy Harris1-1/+1
Man pages don't have any notion of external links and there isn't enough information for pod2html to resolve the links for manpages in the "See Also" section of the man pages. As a result running pod2html generates a bunch of warning messages and just emphasizes/italicizes the text. Therefore, we change the link (L<name>) command to an emphasizes (I<name>) command. The net result is the same, but you don't get the warnings when generating HTML docs. At some point in the future someone might want to do the work to get the links to generate correctly, but until then this will shut up pod2html. svn path=/trunk/; revision=5021
2002-01-20From Michael Tuexen:Guy Harris1-2/+8
put a CRC32C checksum into the header of SCTP packets; add a new "-S" option that is similar to "-s" but that also includes the DATA chunk header, for input files that contain only SCTP payloads. svn path=/trunk/; revision=4580
2002-01-16Put the "-s" option in the SYNOPSIS section.Guy Harris1-0/+1
svn path=/trunk/; revision=4554
2002-01-16SCTP support in text2pcap, and fix to usage message for "-u", fromGuy Harris1-0/+9
Michael Tuexen. Documentation of SCTP support in text2pcap, from me. svn path=/trunk/; revision=4553