aboutsummaryrefslogtreecommitdiffstats
path: root/doc
AgeCommit message (Collapse)AuthorFilesLines
2022-04-18dfilter: Add abs() functionJoão Valverde1-0/+1
Add an absolute value function for ftypes.
2022-04-14epan: add ENC_TIME_USECS timestamp encodingChuck Craft1-1/+6
Needed to format timestamp in #18038 - packet-cql.c Mirrors changes made in !1924 - Add ENC_TIME_NSECS timestamp encoding Documentation in README.dissector, proto.c, proto.h - could use refresh in a different merge request.
2022-04-14dfilter: Add max()/min() tests and documentationJoão Valverde1-0/+5
2022-04-13tshark.adoc: update -z conv/endpoints descriptionsChuck Craft1-10/+10
2022-04-13manpage: Fix grammar errors and improve phrasingMoshe Kaplan9-22/+25
Quickly review of fixing common grammatical errors in the man pages.
2022-04-08dfilter: Allow grouping arithmetical expressions with { }João Valverde1-2/+12
This removes the limitation of having only two terms in an arithmetic expression and allows setting the precedence using curly braces (like any basic calculator). Our grammar currently does not allow grouping arithmetic expressions using parenthesis, because boolean expressions and arithmetic expressions are different and parenthesis are used with the former.
2022-04-08WSUG/tshark: protocol summary and output with "-e"Chuck Craft1-4/+7
2022-04-07editcap: Document use of stdin and stdoutJohn Thacker1-2/+3
Editcap accepts '-' for stdin or stdout, document that. Also change an incorrect statement that claims that the '-v' flag writes to standard output; it writes to standard error.
2022-04-04dfilter: Make logical AND higher precedence than logical ORJoão Valverde1-6/+13
In most, if not all, programming languages logical AND has higher precedence than logical OR. Apply the principle of least surprise and do the same for Wireshark display filters. Before: ip and tcp or udp => ip and (tcp or udp) Filter: ip and tcp or udp Instructions: 00000 CHECK_EXISTS ip 00001 IF_FALSE_GOTO 5 00002 CHECK_EXISTS tcp 00003 IF_TRUE_GOTO 5 00004 CHECK_EXISTS udp 00005 RETURN After: ip and tcp or udp => (ip and tcp) or udp Filter: ip and tcp or udp Instructions: 00000 CHECK_EXISTS ip 00001 IF_FALSE_GOTO 4 00002 CHECK_EXISTS tcp 00003 IF_TRUE_GOTO 5 00004 CHECK_EXISTS udp 00005 RETURN
2022-04-01Docs: Add new display filter syntax to the manpage.João Valverde1-5/+33
2022-03-28plugins.example: Add some commentsJoão Valverde1-1/+7
2022-03-28plugins.example: Add package targetJoão Valverde1-0/+17
Basic package target to create a .zip or tar.gz of the plugin and README file.
2022-03-28plugins.example: Make installation relocatableJoão Valverde1-1/+12
Fixes "make install" to be relocatable using DESTDIR. For that we cannot use an absolute path as intallation directory target. This is useful mostly to implement packaging using CPack. It is a bit awkward to configure a default CMAKE_INSTALL_PREFIX using WiresharkConfig.cmake but it seems to be working OK. The previous non-relocatable behaviour may still be useful. It is relegated to a custom "copy_plugin" target.
2022-03-26Plugins.example: Fix typo and more rewordingJoão Valverde1-2/+5
2022-03-22dfilter: Add bitwise masking of bitsJoão Valverde1-2/+2
Add support for masking of bits. Before the bitwise operator could only test bits, it did not support clearing bits. This allows testing if any combination of bits are set/unset more naturally with a single test. Previously this was only possible by combining several bitwise predicates. Bitwise is implemented as a test node, even though it is not. Maybe the test node should be renamed to something else. Fixes #17246.
2022-03-21etwdump: Clarify "ETW".Gerald Combs1-2/+2
Not everyone knows what ETW is.
2022-03-09dfilter: Deprecate "~=" (any_ne)João Valverde1-2/+0
The representation "~= has been superseded by "!==" with the same meaning, making it superfluous and somewhat confusing. Deprecate "~=" and recommend "!==" instead.
2022-03-09extcap: new interface, wifidump, to capture Wi-Fi frames using a remote SSH hostAdrian Granados2-0/+281
2022-02-23dfilter: Add support for binary literal constantsJoão Valverde1-1/+2
Example: 0b1001, 0B111000, etc.
2022-02-23doc: Update text2pcap and Import from Hexdump docJohn Thacker1-44/+46
Update the text2pcap man page and the Import from Hexdump WSUG page to clarify how to use it, for grammar, and to remove a few things that are no longer relevant. (E.g., it's no longer the case that files without an EOL don't work.) Fix #15563, #15564.
2022-02-11Differentiate `-c` from `-a packets:`David Perry3-6/+10
2022-02-09Specify directory for temporary capturesDavid Perry3-0/+25
2022-02-06doc: Document tshark -z statsJohn Thacker1-47/+142
Document the currently undocumented -z statistics for tshark. Note that all the stats added here exist in 3.6 as well. Fix #8353 (at least for now).
2022-02-06Docs: Accurately describe our minimum GLib and where to get itJim Young1-1/+1
2022-02-06epan: Add BASE_SHOW_UTF_8_PRINTABLEJohn Thacker1-3/+9
Add BASE_SHOW_UTF_8_PRINTABLE and related function tvb_utf_8_isprint for supporting fields of bytes that are "maybe UTF-8" (default or SHOULD be UTF-8 but could be something else, with no encoding indicator), such as SSID fields in IEEE 802.11 (See #16208), certain OctetString fields in Diameter or PFCP, and other places where BASE_SHOW_ASCII_PRINTABLE is currently used. Fix #5307
2022-02-02SOME/IP: Add stats information to tshark man fileDr. Lars Völker1-0/+14
2022-02-01docs: tshark: read filter -> display filterJohn Thacker1-12/+13
The beginning of the tshark manual talks about read filters and using the -R option. Switch all that to display filters and -Y, since that's the typical use now, with -R limited to two-pass analysis.
2022-01-31TShark, Wireshark: add some more documentation of "-i TCP@<host>:<port>".Guy Harris2-1/+7
Add a mention of the meaning of the "TCP@<host>:<port>" syntax in the text about the -i option.
2022-01-31dumpcap: add some more documentation of "-i TCP@<host>:<port>".Guy Harris1-0/+3
Add a mention of the meaning of the "TCP@<host>:<port>" syntax in the text about the -i option.
2022-01-25Docs: Update markup in the text2pcap man page.Gerald Combs1-31/+14
Add an EditorConfig entry as well.
2022-01-16text2pcap: encap types option (instead of link type)John Thacker1-22/+41
Add an option to text2pcap to specify the encapsulation type via wiretap encapsulation type short names instead of pcap link layer types, similar to editcap. Update the documentation to reflect this.
2022-01-15Fix some spelling errorsMartin Mathieson2-2/+2
2022-01-13tshark: Add new long option --hexdump <hexoption>Jim Young1-0/+70
2022-01-11text_import: Allow fake IP headers with Raw IP encapsulationJohn Thacker1-1/+2
In text2pcap and Import from Hex Dump, allow fake IP headers with the appropriate versions when the Raw IP, Raw IPv4, and Raw IPv6 encapsulations are specified. In such cases, do not add a dummy Ethernet header. Continue to reject other encapsulations besides these, Ethernet, and Wireshark Upper PDU when appropriate. Add some checks for the encapsulation type in text_import as well, instead of just assuming that the callers handle it correctly.
2022-01-11text2pcap: Use RFC 3849 addresses for documentationJohn Thacker1-2/+2
Use the RFC 3849 IPv6 address prefix reserved for documentation for the documentation and examples
2022-01-03text2pcap: Use common capture type flagJohn Thacker1-5/+20
Support all possible file formats that wiretap writes, using the same "-F" flag that other CLI tools like editcap, mergecap, and tshark support. Default is still pcap for now; a future commit will switch to pcapng and remove the "-n" option, to match other CLI tools.
2022-01-02[Automatic update for 2022-01-02]Gerald Combs3-5/+5
Update manuf, services enterprise numbers, translations, and other items.
2022-01-02text2pcap: add regexJohn Thacker1-6/+76
Add support in text2pcap for the regex mode added to "Import from Hex Dump" in 3.6.0 The input and output indicators cannot (yet?) be configured, and are set to the default of allowing any of "iI<" for inbound and "oO>" for outbound. This reaches feature parity between text2pcap and Import from Hex Dump, fixes #16724. (There might be some more cleanups to do, including docs.)
2021-12-31Docs: Add some content about different equality operatorsJoão Valverde1-4/+11
Add information about the different kind of comparisons with multiple fields to the wireshark-filter man page. Add some minimal information to the user guide. It would be nice to have a section dedicated to this with some examples.
2021-12-30Prefs/Extcap: Added support for password which is never stored on the diskj.novak@netsystem.cz1-0/+5
2021-12-30text2pcap: Use standard log debug levelJohn Thacker1-9/+2
Remove the '-d' option from text2pcap, and move the two levels of debug messages in text2pcap and text_import to either LOG_LEVEL_DEBUG or LOG_LEVEL_NOISY as appropriate.
2021-12-27doc: fix a copy/paste error and a typoPascal Quantin1-2/+2
2021-12-27Docs: Remove unneeded markup in the Wireshark man page.Gerald Combs1-397/+54
Remove empty list continuations and continuations around single lines of text.
2021-12-27Docs: Document our diagnostic output options.Gerald Combs14-0/+49
Add docs/diagnostic-options.adoc, which is a snippet that documents our various --log-* options. Include it in the dumpcap, rawshark, and tshark man pages. Make the ws_log_print_usage output more consistent.
2021-12-26text2pcap: Add Export PDUJohn Thacker1-0/+12
Support Export PDU functionality from text2pcap. Related to #16724.
2021-12-25text2pcap: Support OFFSET_NONEJohn Thacker1-9/+9
2021-12-22Corrects repeated words throughout the code.Moshe Kaplan5-5/+5
Repeated words were found with: egrep "(\b[a-zA-Z]+) +\1\b" . -Ir and then manually reviewed. Non-displayed strings (e.g., in comments) were also corrected, to ease future review.
2021-12-21Add ws_version.h to wireshark.hJoão Valverde1-1/+0
2021-12-21Add a ws_posix_compat.h headerJoão Valverde1-2/+8
Currently used to define ssize_t on platforms that lack it. Fix some Windows build errors caused by moving the definition into a separate header. Fix some narrowing warnings on Windows x64 from changing the definition of ssize_t from long int to int64_t. The casts in dumpcap are ugly but necessary. The whole code needs to be rewritten for portability, or the warnings disabled.
2021-12-20Documentation: simplify protocol tree function documentation introJaap Keuter1-265/+9
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-19 15:22:31 +0000