aboutsummaryrefslogtreecommitdiffstats
path: root/doc
AgeCommit message (Collapse)AuthorFilesLines
2011-12-27Add a "-G ftypes" option, which dumps our supprted FT_… names andGerald Combs1-6/+16
descriptions. Captitalize and fix up the descriptions. Use its output to create the field type list in the wireshark-filter man page. svn path=/trunk/; revision=40306
2011-11-30Hopefully clarify usage a bit to indicate multiple infile's can be specified ↵Chris Maynard1-12/+11
to be merged. Also, add GPL and copyright info. svn path=/trunk/; revision=40051
2011-11-30Add missing comments in syntax description for -z expertMartin Mathieson1-1/+1
svn path=/trunk/; revision=40050
2011-11-30Change the -z args for expert item. You can now give the minimum severity ↵Martin Mathieson1-6/+7
level to report as well as a filter. Also, now show duplicate reports only once, and give the frequency rather than the frame number. svn path=/trunk/; revision=40049
2011-11-22Unconditionally install idl2wrsBalint Reczey1-1/+1
svn path=/trunk/; revision=39985
2011-11-22Add initial .gitignore filesBalint Reczey1-0/+10
svn path=/trunk/; revision=39982
2011-11-08From Michael Mann via ↵Chris Maynard1-3/+3
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6377, with the tshark man page update by me: tshark -z io,stat,interval,"[SUM|MIN|MAX|AVG](field)field [and filter]" should support floating point. svn path=/trunk/; revision=39767
2011-10-26Sync up the file format lists, add the Aethra files, and promote pcap-ngGuy Harris1-2/+28
to come right after pcap and not to be tagged as experimental. svn path=/trunk/; revision=39594
2011-10-26Fix a spelling mistake. Wrap a few long lines.Jeff Morriss1-13/+14
svn path=/trunk/; revision=39587
2011-10-25Update information about 'encoding' arg values for particular field-types.Bill Meier1-10/+10
svn path=/trunk/; revision=39568
2011-10-23Speak of a "link-layer header type" rather than a "link-layer type"; aGuy Harris1-5/+6
given link-layer type, e.g. 802.11, might have multiple header types (802.11, 802.11 plus various radio headers, Ethernet), and multiple link-layer types might have the same header type (802.11 interfaces might supply Ethernet headers, and Linux loopback interfaces supply Ethernet headers as well). Point to tcpdump.org's page of link-layer header types, rather than to the net/bpf.h header that 1) might not exist on your system and 2) might not be up-to-date if it does exist. svn path=/trunk/; revision=39529
2011-09-30FT_EUI64 need also to specifies encoding !Alexis La Goutte1-2/+2
svn path=/trunk/; revision=39191
2011-09-29Update README.developer to take into account the disappearance ofGuy Harris1-31/+49
FT_EBCDIC and the addition of support for character encodings. svn path=/trunk/; revision=39190
2011-09-28Add default modeline settings to the end of the skeleton code.Chris Maynard1-0/+14
svn path=/trunk/; revision=39178
2011-09-28Rather than complain and quit if -V is missing when -O <protocols> is used, ↵Chris Maynard1-4/+11
do the user a favor and continue as if -V had been specified. Add explicit documentation of the -O <protocols> option to the man page. svn path=/trunk/; revision=39175
2011-09-27Future tense -> present tense for the encoding argument toGuy Harris1-3/+3
proto_tree_add_item() having more than just a byte order. svn path=/trunk/; revision=39170
2011-09-27Add a new tshark option for being able to specify an alternate line ↵Chris Maynard1-10/+20
separator between packets. The option chosen was "-S <separator>". The former -S option was renamed to -P, and the former -P option, which was previously undocumented, was renamed to -2. This fixes https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5342. svn path=/trunk/; revision=39168
2011-09-23The -D, -L and -S options are mutually exclusive, so change "and" to "or".Chris Maynard1-1/+1
svn path=/trunk/; revision=39113
2011-09-23Trivial: Consistently use 2 spaces after a period terminating a sentence.Chris Maynard1-115/+115
svn path=/trunk/; revision=39094
2011-09-23Trivial: Fix typo.Chris Maynard1-1/+1
svn path=/trunk/; revision=39093
2011-09-23Fix a couple of typos and use 2 spaces consistently after a period.Chris Maynard1-65/+65
svn path=/trunk/; revision=39092
2011-09-23Trivial: Add missing <interval> in one case of tshark -z io,stat usage.Chris Maynard1-1/+1
svn path=/trunk/; revision=39091
2011-09-22Add an option -d to specify display filter from the command line.Stig Bjørlykke1-0/+5
This was requested in bug 2463. svn path=/trunk/; revision=39090
2011-09-15Add a tap for showing all expert items.Martin Mathieson1-0/+15
svn path=/trunk/; revision=39010
2011-09-15Alphabetical order, please.Guy Harris1-1/+1
svn path=/trunk/; revision=39009
2011-09-05From Pascal Quantin via bug 1723:Stig Bjørlykke1-0/+8
Make ASCII text dump identification optional. svn path=/trunk/; revision=38886
2011-08-29I'm not sure -Q/WIRESHARK_QUIT_AFTER_CAPTURE is actually useful in batchGuy Harris1-4/+5
mode; in batch mode, you probably want to use TShark or dumpcap. svn path=/trunk/; revision=38787
2011-08-29-Q → WIRESHARK_QUIT_AFTER_CAPTURE.Gerald Combs1-9/+7
svn path=/trunk/; revision=38786
2011-08-23Remove support for libpcre, we use GRegex in GLib.Stig Bjørlykke1-11/+1
svn path=/trunk/; revision=38683
2011-08-08From Jim Young via bug 3196: Add preference for displaying expert infos LEDs.Chris Maynard1-0/+5
Reference: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3196 svn path=/trunk/; revision=38408
2011-07-18Add instructions how to work with "git svn" instead of "svn"Jörg Mayer1-1/+29
svn path=/trunk/; revision=38080
2011-07-15Update ptvcursor API description to reflect 'endianness' --> 'encoding' ↵Bill Meier1-5/+5
parameter change. svn path=/trunk/; revision=38048
2011-07-14Add LTE RLC stats tap to tshark.Martin Mathieson1-1/+16
svn path=/trunk/; revision=38019
2011-07-14Add LTE MAC statistics to tshark.Martin Mathieson1-0/+15
svn path=/trunk/; revision=38016
2011-07-11More GLIB_CHECK_VERSION cleanups. Update the minimum GLib/GTK+ versionsGerald Combs1-4/+5
in README.devloper. Remove g_gnuc.h since it's no longer needed. Remove tvbuff_init(), tvbuff_cleanup(), reassemble_init(), and reassemble_cleanup() since they were only used for older GLib versions which didn't support GSlices. Assume we always support the "matches" operator. svn path=/trunk/; revision=37978
2011-06-28Document the handling of command line parameters with respect toMichael Tüxen3-0/+145
the capturing on multiple interfaces. svn path=/trunk/; revision=37824
2011-06-17Make pcap-ng the default. Add a compile-time option to prefer pcap-ng orGerald Combs1-2/+8
pcap. Add a "-P" capture option which tries to use pcap instead of pcap-ng ("-P" seemed to be the best option but we may want to use a different letter). Update the documentation and release notes. svn path=/trunk/; revision=37696
2011-06-07Add description of LOAD stats for tshark to the manpageRonnie Sahlberg1-2/+25
svn path=/trunk/; revision=37587
2011-06-05From Cal Turney:Anders Broman1-27/+89
1.) The resolution of the time values displayed by tshark's "-z io,stat, ..." should be increased from milliseconds to microseconds (from 3 to 6 decimal places) in order to be consistent with -z relative time-related options such as "-z smb,rtt" and "-z rpc,rtt" which display values to 5 decimal places. [Please note that separate enhancement requests for 6 decimal of precision in Wireshark will be submitted shortly.) 2.) The "frames bytes" column displayed in '-z io,stat' is too narrow, frames and bytes should each have 15 spaces like all the other column types. 3.) The types "FRAMES" and "BYTES" should be added to allow users to display these values separately and allow for filters to be specified. 4.) The 'SUM' option should allow for relative time values such as SRTs to be summed. This would be useful for the calculation of such things as request concurrency (total_SRT_time / duration). 5.) The tshark man page needs some corrections and readability improvements https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4915 svn path=/trunk/; revision=37555
2011-05-29Remove an (almost) duplicate entryJörg Mayer1-3/+0
svn path=/trunk/; revision=37461
2011-05-08Add FT_EUI64 Field TypeAlexis La Goutte1-1/+19
* Remove proto_tree_add_eui64 function from 802.15.4 Dissector * Replace print_eui64/print_eui64 by eui64_to_str/get_eui64_name * Update Documentation (README.dev) * Add new function in libwireshark.def * Support of encoding for tvb_eui64_to_str * Use FT_EUI64 for ICMPv6, CAPWAP, Zbee ... dissector svn path=/trunk/; revision=37015
2011-04-29From Edwin Groothuis via bug 5870:Stig Bjørlykke1-1/+5
The supplied patch adds a new option -O, which specifies a list of protocols (names can be found with the "-G protocols" option) to be fully decoded while the others only show the layer header. svn path=/trunk/; revision=36947
2011-04-12Fix tshark doc (ip.src==1.2.3.4) is not a valid filter for ICMPv6 trafic ;)Alexis La Goutte1-2/+2
svn path=/trunk/; revision=36582
2011-04-11Add conversation tracking and tshark tap support to ICMPv6. Fixes bug 5810.Chris Maynard1-0/+11
TODO: Add a Wireshark tap or look into possibly using the stats tree instead. Also, like ICMP, the ICMPv6 payload appears to carry the sender's timestamp, so it might be possible to make use of this information to estimate the total SRT. (See bug 5770 for more details.) svn path=/trunk/; revision=36561
2011-04-06Add computation of median and change standard deviation calculation to "sample"Chris Maynard1-1/+2
standard deviation. Split statistics output onto 2 lines. svn path=/trunk/; revision=36501
2011-04-06IMHO capinfos, when finished processing, should exit with an error statusBill Meier1-81/+83
if an error occurred while processing. E.G.,: For the default (no -C option): 'capinfos invalid.xxx' or 'capinfos a.pcap invalid.xxx c.pcap' should exit with an error status (after processing all the input args) if there is an error for invalid.xxx. With this fix, I expect fuzz-test.sh (and list_protos_in_cap.sh and presumably other scripts) will work a bit more as as expected. svn path=/trunk/; revision=36487
2011-04-05Add ICMP tap support, and add a tshark tap to measure such things as:Chris Maynard2-2/+14
* Number of ICMP echo requests, replies, lost replies and percent loss. * Min, Max, Average SRT (Service Response Time), and standard deviation. (This is my first tap, so hopefully I didn't miss something, but we'll see ...) TODO: Add a Wireshark tap. svn path=/trunk/; revision=36480
2011-04-01Add some info as to the determination of the length of a FT_STRINGZ item.Bill Meier1-0/+7
Add a note not leaving trailing whitespace on a line. svn path=/trunk/; revision=36434
2011-03-27Add "-z hosts", which dumps name resolution information in hosts format.Gerald Combs1-0/+8
svn path=/trunk/; revision=36372
2011-03-24Add initial pcapng name resolution record support. Wireshark has readGerald Combs2-0/+52
support; TShark has read+write support. Additionally TShark can read a "hosts" file and write those records to a capture file. This uses "struct addrinfo" in many places and probably won't compile on some platforms. svn path=/trunk/; revision=36318
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-02 10:55:21 +0000