aboutsummaryrefslogtreecommitdiffstats
path: root/doc
AgeCommit message (Collapse)AuthorFilesLines
2010-11-17Small clarification.Jaap Keuter1-2/+3
svn path=/trunk/; revision=34921
2010-11-16Make editcap -B work like expected: output no packets after the stop time.Sake Blok1-1/+1
Old behavior was to include a packet with a timestamp of 12:00:00.934 if -B "YYYY-MM-DD 12:00:00" was used. svn path=/trunk/; revision=34913
2010-11-09Fixed typos.Chris Maynard1-17/+17
svn path=/trunk/; revision=34817
2010-11-09Fixed typos.Chris Maynard4-8/+8
svn path=/trunk/; revision=34816
2010-11-09Fixed typos.Chris Maynard1-14/+11
svn path=/trunk/; revision=34815
2010-10-22Add some info about extended value string to section 1.7.1Bill Meier1-1/+12
svn path=/trunk/; revision=34621
2010-10-20Add IPFIX_RECORDS_TO_CHECK to the environment variable section.Jeff Morriss3-0/+21
svn path=/trunk/; revision=34590
2010-10-15Revision 27919 added the ability to feed a libpcap-formatted file toGerald Combs1-2/+25
rawshark but broke the ability to feed it live packets with a pcap_pkthdr prefix on some 64-bit architectures. Add a "-p" flag which lets us explicitly handle file-based or memory-based packet record headers. svn path=/trunk/; revision=34522
2010-10-14Rework "extended value strings":Bill Meier1-5/+21
- Allow direct access when a range of values begins with a value other than 0; - Provide value_string_ext_new() for creating extended value strings at runtime; - Do access to value_string_ext members via a macro (all but value_string.c); - Update documentation. svn path=/trunk/; revision=34514
2010-10-01NEARLY → OVER.Gerald Combs1-1/+1
svn path=/trunk/; revision=34311
2010-09-02Introduce 2 new environment variables: WIRESHARK_EP_VERIFY_POINTERS andJeff Morriss3-16/+58
WIRESHARK_SE_VERIFY_POINTERS that control whether or not we verify if a given pointer is ep_ or se_ allocated, respectively. Turn the behavior off by default for speed reasons (the speed difference isn't huge, but...). Turn the behavior on when fuzz testing. Document these two new variables in the man pages. svn path=/trunk/; revision=34046
2010-08-25Add ws_load_library and ws_module_open, which respectively callGerald Combs1-1/+1
LoadLibrary and g_module_open only for the program directory and system directory on Windows. Use them to replace a bunch of LoadLibrary and g_module_open calls. Use the extension ".dll" for all the DLLs that we load. Add comments about DLL loading in Python. svn path=/trunk/; revision=33924
2010-08-21Document what prefs_register_string_preference() does with your value pointer.Jeff Morriss1-2/+7
svn path=/trunk/; revision=33873
2010-08-12Remove an incorrect line of code from the proto_reg_hanoff prototype.Bill Meier1-2/+0
svn path=/trunk/; revision=33790
2010-07-27Fix grammaro, indent example code.Guy Harris1-8/+9
svn path=/trunk/; revision=33641
2010-07-27Tell people to be careful about loops likeGuy Harris1-0/+11
for (guint8 = 0; guint8 < guint; guint8++) (one of which recently caused an infinite loop with a fuzzed packet in the buildbot). svn path=/trunk/; revision=33639
2010-07-15Don't clean wireshark-filter.pod. It's not generated any more.Gerald Combs1-1/+1
svn path=/trunk/; revision=33540
2010-07-15Don't include the filter list (which is now over 16MB) in theGerald Combs4-26/+26
wireshark-filter man page. Point to other sources for the list instead. svn path=/trunk/; revision=33539
2010-07-14Add an option to print the first, the last or all occurrences of each fieldSake Blok1-0/+5
(when using tshark -T fields) svn path=/trunk/; revision=33529
2010-07-14Make 'tshark -T fields' print all values for fields with multiple occurences.Sake Blok1-1/+7
svn path=/trunk/; revision=33527
2010-07-14Fix a typo.Gerald Combs1-12/+12
svn path=/trunk/; revision=33520
2010-07-14Add dftest.pod and randpkt.pod to the release tarball.Guy Harris1-4/+6
Clean up tabs. svn path=/trunk/; revision=33516
2010-07-13Add a "-d" flag to dumpcap, to print out the generated code for theGuy Harris1-0/+6
capture filter in human-readable form. (Well, readable by humans who know BPF machine language, at least. :-)) svn path=/trunk/; revision=33509
2010-07-13From Jan Šafránek:Jaap Keuter3-3/+173
dftest and randpkt are installed during make install, but they are not documented in any man page. This is a start. It's more or less a compilation of information found elsewhere. svn path=/trunk/; revision=33504
2010-06-30Add Visual C++ project files to the distribution.Gerald Combs1-0/+2
svn path=/trunk/; revision=33386
2010-06-28Remove documentation of Object Identifier configuration files, as a UAT is ↵Graeme Lunt1-62/+0
now used. svn path=/trunk/; revision=33347
2010-06-24Update with documentation on the object identifier configuration files.Graeme Lunt1-0/+62
svn path=/trunk/; revision=33311
2010-06-22Update to reflect changes in defines: REP_* > ENC_*Stig Bjørlykke1-9/+9
svn path=/trunk/; revision=33286
2010-06-18From Jim Young:Anders Broman1-0/+92
The attached patch simply documents a long supported but hidden tshark -G option. Tshark's print_usage() has been augmented as well as the tshark man page. svn path=/trunk/; revision=33253
2010-06-03From Reinhard Speyerer via bug 4779:Gerald Combs1-4/+5
From reading the rawshark(1) manpage my assumption was that rawshark could be used like $ /usr/bml/bin/rawshark -s -r test.pcap -d encap:EN10MB ... However rawshark either expects the -r argument to be - (read from stdin) or a pipe which results in the following error message: rawshark: ".../test.pcap" is neither an interface nor a pipe The proposed rawshark.pod patch updates the -r description to the implemented rawshark functionality. The patch also applies to the current SVN version. svn path=/trunk/; revision=33063
2010-06-02From Jim Young via bug 4331:Gerald Combs1-0/+42
This patch adds a new '-S' option to editcap that will rewrite timestamps of packets to insure that the new capture file is in strict chronological order. This option's primary use case is to fixup the occasional timestamps that have a negative delta time relative to previous packet. This feature is related to (but does not depend on) capinfos enhancement submitted in bug #4315 which helps identify tracefiles with "out-of-order" packets. svn path=/trunk/; revision=33042
2010-06-02From Jim Young via bug 4049:Gerald Combs1-0/+7
This patch adds a new '-o' option to capinfos (enabled by default) to report if the packets within a particular capture file are in strict chronological time order or not. svn path=/trunk/; revision=33041
2010-05-27Copy the (no longer Win32-specific) description of the -B option to the ↵Jeff Morriss1-5/+13
Wireshark man page. svn path=/trunk/; revision=33000
2010-05-27Document the maximum number of files in a ring buffer, including a warning ↵Jeff Morriss3-37/+62
about using large numbers of files. svn path=/trunk/; revision=32999
2010-05-26Put in a warning about the <stdarg.h> problem that I just found andGuy Harris1-0/+20
fixed in one place (and am now fixing in some other places). svn path=/trunk/; revision=32962
2010-05-26Add a -q flag to dumpcap, to squelch its reporting of the packet count,Guy Harris1-0/+12
and add support for SIGINFO, so, if your OS supports SIGINFO, you can get the packet count by typing ^T. svn path=/trunk/; revision=32958
2010-05-25Minor rewording; Also: add note to not use "" for a hf[] array blurb.Bill Meier1-5/+5
svn path=/trunk/; revision=32940
2010-05-24Refer to the endianness arguments as "encoding" rather thanGuy Harris1-3/+3
"representation" - we already use "representation" to refer to the text representation of fields. Change some routines with an endianness argument to make it a representation argument instead; svn path=/trunk/; revision=32929
2010-05-24Use the new REP_ values for proto_tree_add_item().Guy Harris1-9/+17
svn path=/trunk/; revision=32925
2010-05-23Describe values_string_ext.Anders Broman1-0/+17
svn path=/trunk/; revision=32916
2010-05-19Don't have -M affect -v yet; if we end up, for example, having dumpcapGuy Harris1-9/+3
being the only program that needs to be linked with *pcap, that's when we'd want to fetch that information, but there might be other libraries (e.g., the POSIX capabilities library) that it might be linked with but that programs that use it aren't linked with. Don't commit to the output formats of -M, as they are, as noted, subject to change from release to release. svn path=/trunk/; revision=32904
2010-05-18Don't write the SP_SUCCESS messages unless -Z was specified.Guy Harris1-2/+11
Add support for a machine-readable "-v" output, which prints only the pcap version string. Give a little more information about the machine-readable format, but note that it's primarily intended for consumption by Wireshark and TShark and is subject to change. Properly hyphenate "pcap-ng". svn path=/trunk/; revision=32851
2010-05-13Use find_or_create_conversation() in the exampleJeff Morriss1-31/+19
svn path=/trunk/; revision=32793
2010-05-13Document find_or_create_conversation()Jeff Morriss1-15/+26
svn path=/trunk/; revision=32792
2010-05-11Update display filter scripts with new field types.Jaap Keuter1-4/+10
svn path=/trunk/; revision=32766
2010-05-08The default capture buffer size is, in fact, *nominally* 1MB; however,Guy Harris2-8/+14
libpcap/WinPcap and the capture mechanism atop which they run might either silently limit the buffer size to a smaller value or raise it to a higher value - that's the part that's platform-dependent. svn path=/trunk/; revision=32718
2010-05-07-B is no longer Windows-only.Guy Harris2-10/+20
svn path=/trunk/; revision=32707
2010-05-07Add monitor mode support to TShark.Guy Harris1-0/+13
svn path=/trunk/; revision=32704
2010-05-07Beginnings of monitor mode support with libpcap 1.x.Guy Harris1-0/+13
svn path=/trunk/; revision=32702
2010-05-03Update capinfos man page.Bill Meier1-0/+7
svn path=/trunk/; revision=32653
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-26 19:09:55 +0000