diff --git a/doc/tshark.adoc b/doc/tshark.adoc index 8dfe4c63bb..713ac39d6e 100644 --- a/doc/tshark.adoc +++ b/doc/tshark.adoc @@ -599,6 +599,9 @@ of the form "\\pipe\.\*pipename*". Data read from pipes must be in standard pcapng or pcap format. Pcapng data must have the same endianness as the capturing host. +"TCP@:" causes *TShark* to attempt to connect to the +specified port on the specified host and read pcapng or pcap data. + This option can occur multiple times. When capturing from multiple interfaces, the capture file will be saved in pcapng format. -- diff --git a/doc/wireshark.adoc b/doc/wireshark.adoc index e586a4cbbe..455bddbd51 100644 --- a/doc/wireshark.adoc +++ b/doc/wireshark.adoc @@ -406,7 +406,7 @@ Network interface names should match one of the names listed in "*wireshark -D*" (described above); a number, as reported by "*wireshark -D*", can also be used. If you're using UNIX, "*netstat -i*", "*ifconfig -a*" or "*ip link*" might also work to list interface names, -although not all versions of UNIX support the *-a* flag to *ifconfig*. +although not all versions of UNIX support the *-a* option to *ifconfig*. If no interface is specified, *Wireshark* searches the list of interfaces, choosing the first non-loopback interface if there are any @@ -420,6 +420,9 @@ of the form "\\pipe\.\*pipename*". Data read from pipes must be in standard pcapng or pcap format. Pcapng data must have the same endianness as the capturing host. +"TCP@:" causes *Wireshark* to attempt to connect to the +specified port on the specified host and read pcapng or pcap data. + This option can occur multiple times. When capturing from multiple interfaces, the capture file will be saved in pcapng format. --