aboutsummaryrefslogtreecommitdiffstats
path: root/docbook/wsug_src
AgeCommit message (Collapse)AuthorFilesLines
2018-04-25Document "len" and "count" in wireshark-filter(4) and WSUGPeter Wu1-3/+30
Add missing section on display filter functions to WSUG and make it consistent with the wireshark-filter(4) manual. "count" was added in Wireshark 1.12 (bug 9480). "len" was added in Wireshark 1.6.x. "size" (added in 1.8.x) is not documented since it works like "len", except that it is not limited to strings and byte arrays. I think that "len" should be extended to other types while removing "size". Change-Id: I2c8e2b4a11f007de7852a797bed971af86840b47 Reviewed-on: https://code.wireshark.org/review/27146 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-04-25WSUG: Add SS7 code point resolutionUli Heilmeier2-0/+23
Bug: 14617 Change-Id: I0af61d1ad7a80796db057e25f94869b98dfdacf1 Reviewed-on: https://code.wireshark.org/review/27128 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-04-18dfilter: make spaces around ".." optional in display filterPeter Wu1-2/+2
For numeric values such as port numbers, "4430..4434" looks more natural than "4430 .. 4434", so support that. To make this possible, the display filter syntax needs to be restricted. Assume that neither field names nor values can contain "..". The display filter `data contains ..` will now be considered a syntax error and must be written as `data contains ".."` instead. More generally, all values that contain ".." must be quoted. Other than the ".." restriction, the scanner deliberately accepts more characters that can potentially form invalid input. This is to prevent accidentally splitting input in multiple tokens. For example, "9.2." in "frame.time_delta in {9.2.}" is currently parsed as one token and then rejected because it cannot be parsed as time. If the scanner was made stricter, it could treat it as two tokens (floats), "9." and "2." which has different meaning for the set membership operator. An unhandled edge case is "1....2" which is parsed as "1 .. .. 2" but could have been parsed as "1. .. .2" instead. A float with trailing dots followed by ".." seems sufficiently weird, so rejection is fine. Ping-Bug: 14180 Change-Id: Ibad8e851b49346c9d470f09d5d6a54defa21bcb9 Reviewed-on: https://code.wireshark.org/review/26960 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-04-18dfilter: add range support to set membership operator ("f in {x .. y}")Peter Wu1-0/+17
Allow "tcp.srcport in {1662 1663 1664}" to be abbreviated to "tcp.srcport in {1662 .. 1664}". The range operator is supported for any field value which supports the "<=" and "=>" operators and thus works for integers, IP addresses, etc. The naive mapping "tcp.srcport >= 1662 and tcp.srcport <= 1664" is not used because it does not have the intended effect with fields that have multiple occurrences (e.g. tcp.port). Each condition could be satisfied by an other value. Therefore a new DVFM instruction (ANY_IN_RANGE) is added to test the range condition against each individual field value. Bug: 14180 Change-Id: I53c2d0f9bc9d4f0ffaabde9a83442122965c95f7 Reviewed-on: https://code.wireshark.org/review/26945 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-04-15Remove some references to PortAudio.Gerald Combs1-1/+1
Change-Id: Icfe9516ff814db5362aa345e6f527551dcb13935 Reviewed-on: https://code.wireshark.org/review/26946 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-04-09Docs: Remove a bunch of GTK+ references.Gerald Combs2-8/+3
Change-Id: Icab98813d0b81a7337562e9857429d4bb98dc44c Reviewed-on: https://code.wireshark.org/review/26817 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-03-27WSUG: Fix Display Filter docUli Heilmeier1-1/+1
Bug: 14572 Change-Id: If556f6902b21f2f40c812210499c036185366a2c Reviewed-on: https://code.wireshark.org/review/26660 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-03-26Docs: Fix some cross references.Gerald Combs2-36/+36
Update some cross references which were renamed in 1cd92c4961. Fixup some capitalization while we're here. Change-Id: Iae3227839cd34a52662a4b973c0f87e7e5a765cc Reviewed-on: https://code.wireshark.org/review/26655 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-03-26Qt: TCP Stream Graphs dialog updates.Gerald Combs1-7/+32
Add duplicate ACK ticks to Statistics → TCP Stream Graphs → Time Sequence (tcptrace), which I missed when porting from GTK+. Add zero window crosses while we're here. Switch TCPStreamDialog to a subclass of GeometryStateDialog. Add a slot and URL for the Help button and a stub entry in the User's Guide. Bug: 12009 Change-Id: Idf2ddb9eb33d924d65998285b5cffc234156497c Reviewed-on: https://code.wireshark.org/review/26592 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-03-06Transition from GeoIP Legacy to MaxMindDB.Gerald Combs3-25/+34
MaxMind is discontinuing its legacy databases in April in favor of GeoIP2, which use a newer database format (MaxMind DB). The reference C library (libmaxminddb) is available under the Apache 2.0 license which isn't quite compatible with ours. Add mmdbresolve, a utility that reads IPv4 and IPv6 addresses on stdin and prints resolved information on stdout. Place it under a liberal license (MIT) so that we can keep libmaxminddb at arm's length. Add epan/maxmind_db.[ch], which spawns mmdbresolve and communicates with it via stdio. Migrate the preferences and documentation to MaxMindDB. Change the IPv4 and IPv6 asnum fields to FT_UINT32s. Change the geographic coordinate fields to FT_DOUBLEs. Bug: 10658 Change-Id: I24aeed637bea1b41d173270bda413af230f4425f Reviewed-on: https://code.wireshark.org/review/26214 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-03-02Remove the endpoint "Map" feature.Gerald Combs1-2/+1
Remove the endpoint map and its button from the Qt and GTK+ UIs. It depends on GeoIP Legacy for coordinate information and those databases are being deprecated in favor of MaxMind DB. We *could* upgrade the code to use mmdbresolve, but according to https://dev.maxmind.com/geoip/geoip2/geolite2/ they're also going to remove coordinate information from GeoLite2: "In addition, in 2019, latitude and longitude coordinates in the GeoLite2 databases will be removed.* Latitude and longitude coordinates will continue to be provided in GeoIP2 databases. Please check back for updates." Change-Id: I43e1593d282a0f1aae897b1f4724117d1496b21e Reviewed-on: https://code.wireshark.org/review/26229 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-02-26WSUG: Fixup an apostrophe.Gerald Combs1-1/+1
Change-Id: I36b5ca5f182697a4b6cbd69da2a708453cb8a876 Reviewed-on: https://code.wireshark.org/review/26109 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-02-26WSUG: Fixup some quotes and apostrophes.Gerald Combs16-440/+440
Switch from AsciiDoc's smart quotes markup to the quotes themselves, along with apostrophes. Change-Id: I78930d6902e2691b6a2cb35ed5bae6fef4bb7257 Reviewed-on: https://code.wireshark.org/review/26108 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-02-24User Guide: add additional use categoryJaap Keuter1-0/+2
Add "QA engineers use it to verify network applications", as suggested by Alexander Sashnov. Change-Id: Ia9c83fd2f2610db747043f861931470e3f4e4c53 Signed-off-by: Jaap Keuter <jaap.keuter@xs4all.nl> Reviewed-on: https://code.wireshark.org/review/26057 Reviewed-by: Michael Mann <mmann78@netscape.net>
2018-02-18[Automatic update for 2018-02-18]Gerald Combs1-0/+1
Update manuf, services enterprise numbers, translations, and other items. Change-Id: I5b5b729c83aa7017454b7c7d8230415e1834587f Reviewed-on: https://code.wireshark.org/review/25862 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-02-06WSUG: Minor edits.Gerald Combs1-4/+4
Use "or" instead of a comma for alternate keyboard shortcuts. Change-Id: I3f2abf63b4c437ca0fe439d91dfac44e24d9d8e5 Reviewed-on: https://code.wireshark.org/review/25624 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-02-05AsciiDoc: Convert some comments.Gerald Combs17-102/+34
Convert some passthrough XML comments left over from the DocBook → AsciiDoc conversion to AsciiDoc / Asciidoctor comments. Change-Id: Iaf44bcf0b8a3a383e735b2b4394722cbbb2bdff3 Reviewed-on: https://code.wireshark.org/review/25615 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-02-05More AsciiDoc → Asciidoctor updates.Gerald Combs15-309/+311
Switch from AsciiDoc's smart quotes markup to the quotes themselves. Use double curly quotes in place of singles. Switch from XML entities to their direct equivalents where we can. Switch from hex entities to decimal entities where we can't or it's not convenient. (Asciidoctor PDF doesn't yet handle hex entities). Change-Id: Iaf5ec33249e1c91b3d50b5d96251763243b72836 Reviewed-on: https://code.wireshark.org/review/25606 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-02-04Docs: Make our AsciiDoc markup more compatible with AsciiDoctor.Gerald Combs9-95/+93
Start using markup that is preferred by Asciidoctor but compatible with both generators. Add a missing "cpp" attribute and set a couple of Asciidoctor-specific compatibility attributes. Change-Id: Iff4c31362e4493b97a85f46db2c39b18c336536f Reviewed-on: https://code.wireshark.org/review/25600 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-01-14[Automatic update for 2018-01-14]Gerald Combs2-8/+10
Update manuf, services enterprise numbers, translations, and other items. Change-Id: Ie096b93a5c9476d763fb6677d0d9ab54c3c4744c Reviewed-on: https://code.wireshark.org/review/25306 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-01-09Use pcapng as the name of the file format.Guy Harris2-5/+5
At one point, I remember a discussion resulting in the official name of the next-generation replacement for pcap format being changed to "pcapng", with no hyphen. Make Wireshark reflect that. Change-Id: Ie66fb13a0fe3a8682143106dab601952e9154e2a Reviewed-on: https://code.wireshark.org/review/25214 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-12-14Refactor plugin registration and loadingJoão Valverde1-1/+6
Put different types of plugins (libwiretap, libwireshark) in different subdirectories, give libwiretap and libwireshark init routines that load the plugins, and have them scan the appropriate subdirectories so that we don't even *try* to, for example, load libwireshark plugins in programs that only use libwiretap. Compiled plugins are stored in subfolders of the plugin folders, with the subfolder name being the Wireshark minor version number (X.Y). There is another hierarchical level for each Wireshark library (libwireshark, libwscodecs and libwiretap). The folder names are respectively plugins/X.Y/{epan,codecs,wiretap}. Currently we only distribute "epan" (libwireshark) plugins. Change-Id: I3438787a6f45820d64ba4ca91cbe3c8864708acb Reviewed-on: https://code.wireshark.org/review/23983 Petri-Dish: João Valverde <j@v6e.pt> Tested-by: Petri Dish Buildbot Reviewed-by: João Valverde <j@v6e.pt>
2017-10-29[Automatic update for 2017-10-29]Gerald Combs1-2/+2
Update manuf, services enterprise numbers, translations, and other items. Change-Id: Ia316bd89a4a8d08237b0e5eb9f0036dc5a6bad61 Reviewed-on: https://code.wireshark.org/review/24157 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2017-10-01[Automatic update for 2017-10-01]Gerald Combs5-6/+12
Update manuf, services enterprise numbers, translations, and other items. Change-Id: I5ba654c9fade87decd26995b5a2d38734dcfba3b Reviewed-on: https://code.wireshark.org/review/23794 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2017-09-26WSUG: More tools updates.Gerald Combs1-15/+40
Add links to the online man page for each tool. Make sure tshark generates pre-commit-compatible output on Linux. Change-Id: I00d2973475f27460065bc8a65471abef152ded33 Reviewed-on: https://code.wireshark.org/review/23754 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-09-25Docbook: Automatically generate the tools help output.Gerald Combs11-684/+720
Add a CMake target that dumps the help output for our command line tools to individual files. Include those files in the tools appendix instead of pasting them in manually. Fixup the output of some tools so that they pass the pre-commit checks. Change-Id: I925f24818422a190927a96531c21f4d16d3fe5b5 Reviewed-on: https://code.wireshark.org/review/23737 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Gerald Combs <gerald@wireshark.org>
2017-09-20plugins: Add backward compatibility for personal lua scriptsJoão Valverde1-0/+9
Relax requirements for upgrades and make running side-by-side installations more convenient. Change-Id: I5299eed005a4748c54465dec90f477adb577e056 Reviewed-on: https://code.wireshark.org/review/23619 Petri-Dish: João Valverde <j@v6e.pt> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: João Valverde <j@v6e.pt>
2017-09-17plugins: Change personal plugin dir path on UnixJoão Valverde1-4/+1
Installing machine code to XDG_CONFIG_HOME is problematic. Use ~/.local/lib/wireshark/plugins instead. XDG_CONFIG_HOME should be architecture independent. This allows copying the configuration between different architectures safely. Reference: https://www.freedesktop.org/software/systemd/man/file-hierarchy.html Change-Id: I1b18f64aab4dd351d611cfbea3b9333f23c98bfa Reviewed-on: https://code.wireshark.org/review/23498 Petri-Dish: João Valverde <j@v6e.pt> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: João Valverde <j@v6e.pt>
2017-09-17plugins: Use minor version number for plugin install pathJoão Valverde1-1/+1
Wireshark patch releases (X.Y.Z) are binary compatible so reflect that in the plugin installation path. By installing to $pkglibdir/plugins/X.Y out-of-tree plugins don't need to be reinstalled with every patch release. Change-Id: I9d1728e6fb12bcb51d2a723af22c750cb7a966cf Reviewed-on: https://code.wireshark.org/review/23497 Petri-Dish: João Valverde <j@v6e.pt> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: João Valverde <j@v6e.pt>
2017-09-11WSUG: Fix global plugin installation pathJoão Valverde1-1/+1
Change-Id: I28a1259ab30b7b86989f307d89461c26aec878da Reviewed-on: https://code.wireshark.org/review/23493 Reviewed-by: João Valverde <j@v6e.pt>
2017-08-23Update the AsciiDoc button macro name.Gerald Combs6-120/+120
Change the name of the button macro to "btn" in order to be compatible with AsciiDoctor. Change-Id: I673e0fe0ae7b343abeb1afba0b9b11402efdf0d6 Reviewed-on: https://code.wireshark.org/review/23187 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2017-08-22WSUG+WSDG: Add a typographic conventions section.Gerald Combs1-20/+0
Create a common_src directory for common guide content. Add a typographic convention section. Update some of the content accordingly. Change-Id: I4f69c0f52a985c48e07fa0628b19734ec691f74e Reviewed-on: https://code.wireshark.org/review/23131 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-08-22Add hardware timestamping supportAhmad Fatoum2-2/+18
pcap provides a pcap_set_tstamp_type function, which can be used to request hardware timestamps from a supporting kernel. This patch adds support for aforementioned function as well as two new command line options to dumpcap, wireshark and tshark: --list-time-stamp-types List time stamp types supported for the interface --time-stamp-type <type> Change the interface's timestamp method Name choice mimics those used by tcpdump(1), which already supports this feature. However, unlike tcpdump, we provide both options unconditionally. If Wireshark was configured without pcap_set_tstamp_type being available, --list-time-stamp-types reports an empty list. Change-Id: I418a4b2b84cb01949cd262aad0ad8427f5ac0652 Signed-off-by: Ahmad Fatoum <ahmad.fatoum@siemens.com> Reviewed-on: https://code.wireshark.org/review/23113 Petri-Dish: Guy Harris <guy@alum.mit.edu> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-08-18WSUG: Update the TCP analysis section.Gerald Combs1-4/+7
Clarify and fix some items. Change-Id: I1f9f8a32ceaa1de4c1ec2936913c87c08ba63c88 Reviewed-on: https://code.wireshark.org/review/23123 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2017-08-14WSUG: Remove the protocol help sectionGerald Combs1-122/+0
The protocol help feature was completely removed in g09efa5fb8b and deprecated long before that. Change-Id: Ia0bde785002025c0cf9e3f783a5cad7f784938a2 Reviewed-on: https://code.wireshark.org/review/23076 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2017-08-13Get rid of trailing blanks.Guy Harris1-3/+3
Change-Id: Ic236b307a0d9d81a0c906fa33599706165d4360d Reviewed-on: https://code.wireshark.org/review/23061 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-08-13Clean up configuration file and plugin folder description.Guy Harris1-106/+226
Have a separate section, before all the others, giving the top-level directories under which those folders are placed, with names for use in later sections. Update the example personal application data folder on Windows to the NT 6.x-and-beyond standard. Don't give the pathnames for configuration files in the table, just give the name and the description. For the global files, distinguish between macOS and other Unix-like systems, and, for the latter, mention both /usr/XXX and /usr/local/XXX. The preferences file isn't "wireshark.conf", and hasn't been that for quite a while. For all the configuration files, give the details of personal vs. global files - they're different for different files. Have separate sections for configuration files and plugin folders. For plugin folders, note both the use of the top-level plugin folder for Lua scripts and the use of the per-Wireshark-version subfolder for compiled plugins. Use fixed-format text for the non-variable parts of pathnames, and italics for the variable parts. This should, among other things, make it easier for other documents, such as the Lua documentation in the Wireshark wiki, to refer to folders such as the configuration file and plugin folders. Change-Id: I133c1e159e992827458bee64c4f37be5b50f9b6f Reviewed-on: https://code.wireshark.org/review/23060 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2017-06-22Make "matches" case-insensitive.Gerald Combs1-2/+2
Make the "matches" operator case-insensitive by default. Case sensitivity can be switched back on using "(?-i)". It might be nice to make "contains" case-insensitive as well, but we'd need a caseless version of epan_memmem. Change-Id: I5e39a52c148477c30c808152bcace08348df815a Reviewed-on: https://code.wireshark.org/review/22330 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-06-15TCP Analysis: Update the spurious retransmission check.Gerald Combs1-2/+7
The spurious retransmission check operates on the last-seen acknowledgment in the reverse direction. Adjust the analysis logic so that it is checked independently of the forward sequence number. Update the documentation accordingly. Change-Id: I3714f44398501a581f967c61e119fe95f90209b1 Reviewed-on: https://code.wireshark.org/review/21769 Reviewed-by: Michael Mann <mmann78@netscape.net> Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-05-26WSUG: Add a TCP Analysis section.Gerald Combs1-3/+193
Try to document as accurately as possible the circumstances under which each TCP analysis flag is added. Update some TCP debugging code. Change-Id: I793756f73b8ade328e150acf32bc203792e29449 Reviewed-on: https://code.wireshark.org/review/21749 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Gerald Combs <gerald@wireshark.org>
2017-03-28Reflect new default value of snaplen in man pages.Martin Sehnoutka3-5/+5
Default value for snaplen is defined in wiretap/wtap.h: #define WTAP_MAX_PACKET_SIZE 262144 and used in capture_opts.c: capture_opts->default_options.snaplen = WTAP_MAX_PACKET_SIZE; but help and man pages don't reflect this change. Change-Id: I35ddf1e8b7ffd657f4e01b3fe6b4c44c9acece2b Reviewed-on: https://code.wireshark.org/review/20738 Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com> Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-03-26User Guide: Fix two trivial typosJim Young1-2/+2
Change-Id: I25bab6eb1072bec102e00a76027c7742a0ea883b Reviewed-on: https://code.wireshark.org/review/20714 Petri-Dish: Jim Young <jim.young.ws@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-03-03Update documentation with reference to $XDG_CONFIG_HOMEPeter Wu1-16/+20
Since v2.1.0rc0-184-gb0b53fa593, $XDG_CONFIG_HOME/wireshark (instead of $HOME/.wireshark) is used, clarify this in the WSUG and manuals. Change-Id: I74a6f9b86bd8d54ee326ca83d7536e091d6da08a Reviewed-on: https://code.wireshark.org/review/20364 Reviewed-by: Peter Wu <peter@lekensteyn.nl> Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2017-03-03Qt: Add selection history navigation.Gerald Combs1-4/+6
Add the ability to move back and forth in the packet selection history similar to GTK+. Update the documentation accordingly. Change-Id: If1fdc1e59b240c0588c292dc0f7f0a5f083c30e1 Reviewed-on: https://code.wireshark.org/review/20320 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-03-02Docbook: Replace "OS X" with "macOS".Gerald Combs5-14/+14
Change-Id: Ic2ab4f9050c9c76349d8d872b8fc2bf9feb7827d Reviewed-on: https://code.wireshark.org/review/20325 Petri-Dish: Anders Broman <a.broman58@gmail.com> Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-01-24WSUG: Display filter: add matches, contains, bitwise_andUli Heilmeier1-0/+25
Added examples for the matches, contains and bitwise_and operators. Most of the text and the examples have been taken from the wiki and the wireshark-filter manpage. Bug: 13320 Change-Id: Icd9a325c05ecd4ecd1cbde8162a4c88cae335d1d Reviewed-on: https://code.wireshark.org/review/19758 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2016-11-11AsciiDoc: Create an include file for attributes.Gerald Combs12-151/+148
Move the replacement definitions in asciidoc.conf to attributes.asciidoc. This makes the markup a bit cleaner and is more compatible with AsciiDoctor. Use a standard naming scheme for URLs. Change-Id: Ica73aaadb013be2a4e6a3963fb54e6db6e02e98f Reviewed-on: https://code.wireshark.org/review/18655 Reviewed-by: Peter Wu <peter@lekensteyn.nl> Reviewed-by: Gerald Combs <gerald@wireshark.org>
2016-09-23WSUG: More layout and PDF fixes.Gerald Combs1-16/+16
Set variablelist.as.blocks in custom_layer_pdf.xsl so that we don't end up with list text squeezed into tiny columns on the right. Set column widths for most of our tables. Change-Id: I3fe47d945a7945618012c9de1fc0e97b788dea9e Reviewed-on: https://code.wireshark.org/review/17893 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2016-09-23WSDG: Layout and content updates.Gerald Combs3-64/+97
Adjust the column widths of some tables to that they render more cleanly and without FOP warnings. Move some table content to plain text instead of trying to shove it into table cells. Fix some other layout and formatting. Change-Id: I40e40fd7ca5c3cc594ea30c8b1ad233afd4cdca4 Reviewed-on: https://code.wireshark.org/review/17880 Reviewed-by: Gerald Combs <gerald@wireshark.org>
2016-09-22WSDG: Adjust markup and fix FOP warningsGerald Combs2-16/+15
Wrap monospace text in our PDF output. Fix the formatting of a list. Fix an anchor reference. Change-Id: Id9433f3e3462569299e6702b4a4e137481ad80c4 Reviewed-on: https://code.wireshark.org/review/17877 Reviewed-by: Gerald Combs <gerald@wireshark.org>