From 311c5ef6868bb2f2721d979ec22390620133e1c3 Mon Sep 17 00:00:00 2001 From: Chris Maynard Date: Tue, 27 Sep 2011 18:32:59 +0000 Subject: Add a new tshark option for being able to specify an alternate line separator between packets. The option chosen was "-S ". The former -S option was renamed to -P, and the former -P option, which was previously undocumented, was renamed to -2. This fixes https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5342. svn path=/trunk/; revision=39168 --- doc/tshark.pod | 30 ++++++++++++++++++++---------- 1 file changed, 20 insertions(+), 10 deletions(-) (limited to 'doc/tshark.pod') diff --git a/doc/tshark.pod b/doc/tshark.pod index 55419a4fc1..a520729416 100644 --- a/doc/tshark.pod +++ b/doc/tshark.pod @@ -6,6 +6,7 @@ tshark - Dump and analyze network traffic =head1 SYNOPSIS B +S<[ B<-2> ]> S<[ B<-a> Ecapture autostop conditionE ] ...> S<[ B<-b> Ecapture ring buffer optionE] ...> S<[ B<-B> Ecapture buffer sizeE ] > @@ -29,11 +30,12 @@ S<[ B<-N> Ename resolving flagsE ]> S<[ B<-o> Epreference settingE ] ...> S<[ B<-O> EprotocolsE ]> S<[ B<-p> ]> +S<[ B<-P> ]> S<[ B<-q> ]> S<[ B<-r> EinfileE ]> S<[ B<-R> Eread (display) filterE ]> S<[ B<-s> Ecapture snaplenE ]> -S<[ B<-S> ]> +S<[ B<-S> EseparatorE ]> S<[ B<-t> ad|a|r|d|dd|e ]> S<[ B<-T> pdml|psml|ps|text|fields ]> S<[ B<-v> ]> @@ -142,6 +144,10 @@ to dump one of several types of internal glossaries and then exit. =over 4 +=item -2 + +Perform a two-pass analysis. + =item -a Ecapture autostop conditionE Specify a criterion that specifies when B is to stop writing @@ -548,6 +554,11 @@ If used after an B<-i> option, the interface specified by the last B<-i> option occurring before this option will not be put into the promiscuous mode. +=item -P + +Decode and display packets even while writing raw packet data using the +B<-w> option. + =item -q When capturing packets, don't display the continuous count of packets @@ -591,10 +602,9 @@ the interface specified by the last B<-i> option occurring before this option. If the snapshot length is not set specifically, the default snapshot length is used if provided. -=item -S +=item -S EseparatorE -Decode and display packets even while writing raw packet data using the -B<-w> option. +Set the line separator to be printed between packets. =item -t ad|a|r|d|dd|e @@ -838,7 +848,7 @@ Example: B<-z io,stat,0.010,E<34>COUNT(smb.sid)smb.sidE<34>> This will count the total number of SIDs seen in each 10ms interval. B)I [and I]> - Unlike COUNT, the I of the -specified field are summed per time interval. +specified field are summed per time interval. ''I'' can only be a named integer or relative time field. Example: B<-z io,stat,0.010,E<34>SUM(frame.len)frame.lenE<34>> @@ -914,15 +924,15 @@ A value of 1.0 represents one I/O in flight. Column #0: LOAD(smb.time)smb.time | Column #0 | Time | LOAD | - 0000.000000-0000.001000 1.000000 - 0000.001000-0000.002000 0.741000 - 0000.002000-0000.003000 0.000000 - 0000.003000-0000.004000 1.000000 + 0000.000000-0000.001000 1.000000 + 0000.001000-0000.002000 0.741000 + 0000.002000-0000.003000 0.000000 + 0000.003000-0000.004000 1.000000 B]> - Displays the total number of frames or bytes. -The filter field is optional but if included it must be prepended with ''()''. +The filter field is optional but if included it must be prepended with ''()''. The following command displays five columns: the total number of frames and bytes (transferred bidirectionally) using a single comma, the same two stats using the FRAMES and BYTES -- cgit v1.2.3