aboutsummaryrefslogtreecommitdiffstats
path: root/doc
AgeCommit message (Collapse)AuthorFilesLines
2011-06-17Make pcap-ng the default. Add a compile-time option to prefer pcap-ng orGerald Combs1-2/+8
pcap. Add a "-P" capture option which tries to use pcap instead of pcap-ng ("-P" seemed to be the best option but we may want to use a different letter). Update the documentation and release notes. svn path=/trunk/; revision=37696
2011-06-07Add description of LOAD stats for tshark to the manpageRonnie Sahlberg1-2/+25
svn path=/trunk/; revision=37587
2011-06-05From Cal Turney:Anders Broman1-27/+89
1.) The resolution of the time values displayed by tshark's "-z io,stat, ..." should be increased from milliseconds to microseconds (from 3 to 6 decimal places) in order to be consistent with -z relative time-related options such as "-z smb,rtt" and "-z rpc,rtt" which display values to 5 decimal places. [Please note that separate enhancement requests for 6 decimal of precision in Wireshark will be submitted shortly.) 2.) The "frames bytes" column displayed in '-z io,stat' is too narrow, frames and bytes should each have 15 spaces like all the other column types. 3.) The types "FRAMES" and "BYTES" should be added to allow users to display these values separately and allow for filters to be specified. 4.) The 'SUM' option should allow for relative time values such as SRTs to be summed. This would be useful for the calculation of such things as request concurrency (total_SRT_time / duration). 5.) The tshark man page needs some corrections and readability improvements https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4915 svn path=/trunk/; revision=37555
2011-05-29Remove an (almost) duplicate entryJörg Mayer1-3/+0
svn path=/trunk/; revision=37461
2011-05-08Add FT_EUI64 Field TypeAlexis La Goutte1-1/+19
* Remove proto_tree_add_eui64 function from 802.15.4 Dissector * Replace print_eui64/print_eui64 by eui64_to_str/get_eui64_name * Update Documentation (README.dev) * Add new function in libwireshark.def * Support of encoding for tvb_eui64_to_str * Use FT_EUI64 for ICMPv6, CAPWAP, Zbee ... dissector svn path=/trunk/; revision=37015
2011-04-29From Edwin Groothuis via bug 5870:Stig Bjørlykke1-1/+5
The supplied patch adds a new option -O, which specifies a list of protocols (names can be found with the "-G protocols" option) to be fully decoded while the others only show the layer header. svn path=/trunk/; revision=36947
2011-04-12Fix tshark doc (ip.src==1.2.3.4) is not a valid filter for ICMPv6 trafic ;)Alexis La Goutte1-2/+2
svn path=/trunk/; revision=36582
2011-04-11Add conversation tracking and tshark tap support to ICMPv6. Fixes bug 5810.Chris Maynard1-0/+11
TODO: Add a Wireshark tap or look into possibly using the stats tree instead. Also, like ICMP, the ICMPv6 payload appears to carry the sender's timestamp, so it might be possible to make use of this information to estimate the total SRT. (See bug 5770 for more details.) svn path=/trunk/; revision=36561
2011-04-06Add computation of median and change standard deviation calculation to "sample"Chris Maynard1-1/+2
standard deviation. Split statistics output onto 2 lines. svn path=/trunk/; revision=36501
2011-04-06IMHO capinfos, when finished processing, should exit with an error statusBill Meier1-81/+83
if an error occurred while processing. E.G.,: For the default (no -C option): 'capinfos invalid.xxx' or 'capinfos a.pcap invalid.xxx c.pcap' should exit with an error status (after processing all the input args) if there is an error for invalid.xxx. With this fix, I expect fuzz-test.sh (and list_protos_in_cap.sh and presumably other scripts) will work a bit more as as expected. svn path=/trunk/; revision=36487
2011-04-05Add ICMP tap support, and add a tshark tap to measure such things as:Chris Maynard2-2/+14
* Number of ICMP echo requests, replies, lost replies and percent loss. * Min, Max, Average SRT (Service Response Time), and standard deviation. (This is my first tap, so hopefully I didn't miss something, but we'll see ...) TODO: Add a Wireshark tap. svn path=/trunk/; revision=36480
2011-04-01Add some info as to the determination of the length of a FT_STRINGZ item.Bill Meier1-0/+7
Add a note not leaving trailing whitespace on a line. svn path=/trunk/; revision=36434
2011-03-27Add "-z hosts", which dumps name resolution information in hosts format.Gerald Combs1-0/+8
svn path=/trunk/; revision=36372
2011-03-24Add initial pcapng name resolution record support. Wireshark has readGerald Combs2-0/+52
support; TShark has read+write support. Additionally TShark can read a "hosts" file and write those records to a capture file. This uses "struct addrinfo" in many places and probably won't compile on some platforms. svn path=/trunk/; revision=36318
2011-03-23From: http://www.wireshark.org/lists/wireshark-dev/201103/msg00157.htmlChris Maynard2-35/+63
Change RTT references to SRT. (tshark.pod could use a description for -z afp,srt and -z camel,srt) svn path=/trunk/; revision=36297
2011-03-17Add README.heuristic to the source distributionJeff Morriss1-0/+1
svn path=/trunk/; revision=36205
2011-02-14Disallow invalid char's in the filename passed to idl2wrs. Fixes bug 1129.Chris Maynard1-2/+2
svn path=/trunk/; revision=35944
2011-02-10Document that proto_tree_add_bytes_format() andJeff Morriss1-0/+4
proto_tree_add_bytes_format_value() may be given a NULL value_ptr. svn path=/trunk/; revision=35907
2011-02-09Document that NTP times can be added with proto_tree_add_item().Jeff Morriss1-5/+21
svn path=/trunk/; revision=35884
2011-02-04From Jason Masker (bug 5240):Sake Blok1-4/+6
` Allow editcap to chop from beginning of packet for decapsulation svn path=/trunk/; revision=35832
2011-01-26Sharpen the description of preference names.Jaap Keuter1-1/+3
svn path=/trunk/; revision=35671
2011-01-21From Alexis La Goutte via ↵Jeff Morriss1-0/+6
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5603 : Following the discussion on the dev mailing list about ett_ value in subtree http://www.wireshark.org/lists/wireshark-dev/201101/msg00039.html a small to update the Readme Developer Guide ! svn path=/trunk/; revision=35610
2011-01-14Add tvb_get_[n|le]toh[40|48|56]() accessors. Addresses bug 5082.Chris Maynard1-0/+6
svn path=/trunk/; revision=35538
2011-01-12Document and export:Anders Broman1-0/+9
tvb_bcd_dig_to_ep_str(); svn path=/trunk/; revision=35499
2011-01-12Introduce, and start using, tvb_get_const_stringz(). This function returns aJeff Morriss1-5/+11
pointer to a NULL-terminated string in the TVB. It is no safer than dissectors which call tvb_get_strsize() and then tvb_get_ptr() but it makes it clear that this usage of tvb_get_ptr() is safe. This function is slightly more efficient than tvb_get_ephemeral_stringz()--but only as long as we're not using composite TVBs. svn path=/trunk/; revision=35493
2011-01-03State in the developer documentation that the tvb_fake_unicode() andStephen Fisher1-15/+4
tvb_get_ephemeral_fake_unicode() functions have been superceded by tvb_get_unicode_string() and tvb_get_ephemeral_unicode_string() respectivey. svn path=/trunk/; revision=35349
2011-01-03Document new tvb_get_unicode_string() and tvb_get_ephemeral_string()Stephen Fisher1-0/+12
functions. svn path=/trunk/; revision=35345
2010-12-23Introduce new function called tvb_get_ephemeral_unicode_stringz(), whichStephen Fisher1-0/+7
is a unicode (UTF-16) version of tvb_get_ephemeral_stringz(). It scans a tvbuff for a UTF-16 string and converts it to UTF-8 upon return. svn path=/trunk/; revision=35253
2010-12-22Allow for NULL preference descriptions.Jaap Keuter1-1/+1
svn path=/trunk/; revision=35242
2010-12-20Rename the routines that handle dissector tables with unsigned integerGuy Harris3-9/+9
keys to have _uint in their names, to match the routines that handle dissector tables with string keys. (Using _port can confuse people into thinking they're intended solely for use with TCP/UDP/etc. ports when, in fact, they work better for things such as Ethernet types, where the binding of particular values to particular protocols are a lot stronger.) svn path=/trunk/; revision=35224
2010-12-18Revert SVN #35214 based upon comments in the Wireshark-dev list.Bill Meier1-1/+647
http://www.wireshark.org/lists/wireshark-dev/201012/msg00206.html svn path=/trunk/; revision=35218
2010-12-17The Styleguide section has been moved to the Wireshark Developer's Guide.Bill Meier1-647/+1
svn path=/trunk/; revision=35214
2010-12-14Update the "Following Conversations" section to use se_alloc() instead of ↵Bill Meier1-63/+47
GMemChunks. Also: add information about the conversation_set_dissector() function. svn path=/trunk/; revision=35185
2010-12-07... and update the documentation too :-)Sake Blok1-0/+6
svn path=/trunk/; revision=35144
2010-11-30We don't include a comprehensive display filter reference; don't say weGerald Combs1-6/+3
do. svn path=/trunk/; revision=35079
2010-11-27From OKANO Takayoshi via bug #5442: Fix typos in documentationStephen Fisher4-4/+4
svn path=/trunk/; revision=35038
2010-11-19Make some updates to describe the newer features.Jaap Keuter1-4/+7
svn path=/trunk/; revision=34964
2010-11-17Small clarification.Jaap Keuter1-2/+3
svn path=/trunk/; revision=34921
2010-11-16Make editcap -B work like expected: output no packets after the stop time.Sake Blok1-1/+1
Old behavior was to include a packet with a timestamp of 12:00:00.934 if -B "YYYY-MM-DD 12:00:00" was used. svn path=/trunk/; revision=34913
2010-11-09Fixed typos.Chris Maynard1-17/+17
svn path=/trunk/; revision=34817
2010-11-09Fixed typos.Chris Maynard4-8/+8
svn path=/trunk/; revision=34816
2010-11-09Fixed typos.Chris Maynard1-14/+11
svn path=/trunk/; revision=34815
2010-10-22Add some info about extended value string to section 1.7.1Bill Meier1-1/+12
svn path=/trunk/; revision=34621
2010-10-20Add IPFIX_RECORDS_TO_CHECK to the environment variable section.Jeff Morriss3-0/+21
svn path=/trunk/; revision=34590
2010-10-15Revision 27919 added the ability to feed a libpcap-formatted file toGerald Combs1-2/+25
rawshark but broke the ability to feed it live packets with a pcap_pkthdr prefix on some 64-bit architectures. Add a "-p" flag which lets us explicitly handle file-based or memory-based packet record headers. svn path=/trunk/; revision=34522
2010-10-14Rework "extended value strings":Bill Meier1-5/+21
- Allow direct access when a range of values begins with a value other than 0; - Provide value_string_ext_new() for creating extended value strings at runtime; - Do access to value_string_ext members via a macro (all but value_string.c); - Update documentation. svn path=/trunk/; revision=34514
2010-10-01NEARLY → OVER.Gerald Combs1-1/+1
svn path=/trunk/; revision=34311
2010-09-02Introduce 2 new environment variables: WIRESHARK_EP_VERIFY_POINTERS andJeff Morriss3-16/+58
WIRESHARK_SE_VERIFY_POINTERS that control whether or not we verify if a given pointer is ep_ or se_ allocated, respectively. Turn the behavior off by default for speed reasons (the speed difference isn't huge, but...). Turn the behavior on when fuzz testing. Document these two new variables in the man pages. svn path=/trunk/; revision=34046
2010-08-25Add ws_load_library and ws_module_open, which respectively callGerald Combs1-1/+1
LoadLibrary and g_module_open only for the program directory and system directory on Windows. Use them to replace a bunch of LoadLibrary and g_module_open calls. Use the extension ".dll" for all the DLLs that we load. Add comments about DLL loading in Python. svn path=/trunk/; revision=33924
2010-08-21Document what prefs_register_string_preference() does with your value pointer.Jeff Morriss1-2/+7
svn path=/trunk/; revision=33873
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-27 16:32:59 +0000