Age | Commit message (Collapse) | Author | Files | Lines |
|
argument to the -F flag for pcap format is "libpcap", not "pcap", we
have a problem. Make it "pcap", and add a backwards-compatibility hack
to support using "libpcap" as well.
Update the man pages to refer to it as pcap as well, and fix the
capitalization of "WinPcap" (see http://www.winpcap.org) while we're at
it.
Also, refer to http://www.tcpdump.org/linktypes.html for the list of
link-layer header types for pcap and pcap-ng.
svn path=/trunk/; revision=50989
|
|
This patch augments Wireshark's and tshark's augument usage reports (-? and
-t?) and the Wireshark and tshark man pages to list all available timestamp
options available for the -t option.
svn path=/trunk/; revision=50445
|
|
Fixes the 2nd problem reported in https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8774
svn path=/trunk/; revision=49865
|
|
svn path=/trunk/; revision=49837
|
|
to the tree (to separate this case from the generic DISSECTOR_BUG case).
Enable this environment variable when fuzz testing.
Enable the 3rd (without tree but with a read filter) check (added in r49643)
when testing capture files but not when fuzz testing--not sure if we want to
add even more to the fuzzbot's work load now (OTOH I've been running it for
a while and it hasn't buried me in bugs).
svn path=/trunk/; revision=49784
|
|
svn path=/trunk/; revision=49427
|
|
svn path=/trunk/; revision=49426
|
|
Part of https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8223
svn path=/trunk/; revision=48653
|
|
svn path=/trunk/; revision=48648
|
|
README.wmem in a couple of places.
svn path=/trunk/; revision=48251
|
|
environment variable.
svn path=/trunk/; revision=48249
|
|
svn path=/trunk/; revision=47937
|
|
variable (WIRESHARK_DEBUG_USE_SLICES) which turns off the slab allocator and uses
g_slices instead (which can themselves be turned off by setting
G_SLICE=always-malloc).
This makes debugging problems in slab-allocated memory easier to find
(hopefully including https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8197 ).
Set WIRESHARK_DEBUG_USE_SLICES when running Valgrind on *shark.
Remove unused structure member: emem_chunk_t.org.
svn path=/trunk/; revision=47110
|
|
svn path=/trunk/; revision=46450
|
|
restriction from the Synopsis.
This is the man page for Wireshark, not Tshark (fix a cut-n-pasteo).
svn path=/trunk/; revision=45229
|
|
Add a new name resolution option: whether or not use the configured (in the OS)
name resolver (e.g., DNS) to resolve network names. When this option is disabled
but network name resolution is enabled then Wireshark will resolve only those
names that it can from local sources. This includes (at least, AFAIK):
- name resolutions that Wireshark picks up on from DNS packets it decodes
- the "user hosts file" (~/.wireshark/hosts on *NIX)
- what Wireshark reads out of capture file (the PCAPNG name resolution block)
This new preference defaults to "use external resolvers" for backward
compatibility (so people turning on network name resolution will get the old
behavior).
This option can be set via Edit->Preferences and on the command line; there
remain several UIs (e.g., the "open capture file" dialog, the
View->Name Resolution menu, etc.) that don't have the new option yet.
Also expand on the "description" for the name resolution preferences: these
are used not only in the tooltips but are also written to the preferences
file. The previous text didn't include enough context when written do the
preferences file.
svn path=/trunk/; revision=43605
|
|
svn path=/trunk/; revision=42484
|
|
return the right error code and information string.
InfoVista bought Accellent Group, and, at least according to the
InfoVista Web site, it's "5View", not "5Views".
svn path=/trunk/; revision=42119
|
|
svn path=/trunk/; revision=41657
|
|
prevents OutOfMemory exceptions from being thrown. This makes it easier
to debug such conditions.
Set this variable in test-fuzzed-cap.sh but not in fuzz-test.sh; it's nice
to see the friendly out-of-memory error message in the bug reports the
latter script generates.
svn path=/trunk/; revision=41656
|
|
svn path=/trunk/; revision=41567
|
|
Refer to pcap-filter and mention tcpdump only as a fallback.
svn path=/trunk/; revision=40820
|
|
to come right after pcap and not to be tagged as experimental.
svn path=/trunk/; revision=39594
|
|
svn path=/trunk/; revision=39094
|
|
svn path=/trunk/; revision=39093
|
|
This was requested in bug 2463.
svn path=/trunk/; revision=39090
|
|
mode; in batch mode, you probably want to use TShark or dumpcap.
svn path=/trunk/; revision=38787
|
|
svn path=/trunk/; revision=38786
|
|
Reference: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3196
svn path=/trunk/; revision=38408
|
|
the capturing on multiple interfaces.
svn path=/trunk/; revision=37824
|
|
Change RTT references to SRT.
(tshark.pod could use a description for -z afp,srt and -z camel,srt)
svn path=/trunk/; revision=36297
|
|
svn path=/trunk/; revision=35144
|
|
svn path=/trunk/; revision=35038
|
|
svn path=/trunk/; revision=34817
|
|
svn path=/trunk/; revision=34590
|
|
WIRESHARK_SE_VERIFY_POINTERS that control whether or not we verify if a given
pointer is ep_ or se_ allocated, respectively.
Turn the behavior off by default for speed reasons (the speed difference isn't
huge, but...).
Turn the behavior on when fuzz testing.
Document these two new variables in the man pages.
svn path=/trunk/; revision=34046
|
|
now used.
svn path=/trunk/; revision=33347
|
|
svn path=/trunk/; revision=33311
|
|
Wireshark man page.
svn path=/trunk/; revision=33000
|
|
about using large numbers of files.
svn path=/trunk/; revision=32999
|
|
program the man page describes, and give a bit more detail.
svn path=/trunk/; revision=32458
|
|
WIRESHARK_ABORT_ON_DISSECTOR_BUG
svn path=/trunk/; revision=32457
|
|
use any of the Wireshark "personal" files.
This helps to address the complaint in:
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2904
svn path=/trunk/; revision=32452
|
|
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2132
Point to the Wiki's page on capture filter syntax in case neither libpcap's
nor tcpdump's man pages are available (e.g., on Windows).
svn path=/trunk/; revision=32435
|
|
svn path=/trunk/; revision=32358
|
|
to be set.
Clarify that each "-b" criterion needs the "-b" option (see bug 4573).
Fix a couple of typos.
svn path=/trunk/; revision=32245
|
|
operation
svn path=/trunk/; revision=31973
|
|
Document "-z conv,ipv6" for Wireshark. Rewrite the descriptions of the
"-z conv,{type}" options a bit.
svn path=/trunk/; revision=31233
|
|
svn path=/trunk/; revision=31038
|
|
svn path=/trunk/; revision=30854
|