From ae39d9ad13434865ecdac5e2749d2e48cd842b97 Mon Sep 17 00:00:00 2001 From: Joerg Mayer Date: Sun, 12 Mar 2017 12:20:23 +0100 Subject: [PATCH] tshark and tfshark require -2 when using -R. Document this. MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Change-Id: I3ef802ed1163512e20da10eaa8da3239107b6fae Reviewed-on: https://code.wireshark.org/review/20509 Reviewed-by: Jörg Mayer --- tfshark.c | 1 + tshark.c | 1 + 2 files changed, 2 insertions(+) diff --git a/tfshark.c b/tfshark.c index 9abcd92c7f..ae1e6e495d 100644 --- a/tfshark.c +++ b/tfshark.c @@ -194,6 +194,7 @@ print_usage(FILE *output) fprintf(output, "Processing:\n"); fprintf(output, " -2 perform a two-pass analysis\n"); fprintf(output, " -R packet Read filter in Wireshark display filter syntax\n"); + fprintf(output, " (requires -2)\n"); fprintf(output, " -Y packet displaY filter in Wireshark display filter\n"); fprintf(output, " syntax\n"); fprintf(output, " -d %s ...\n", DECODE_AS_ARG_TEMPLATE); diff --git a/tshark.c b/tshark.c index 2321b8bbd8..ad81471b2d 100644 --- a/tshark.c +++ b/tshark.c @@ -358,6 +358,7 @@ print_usage(FILE *output) fprintf(output, "Processing:\n"); fprintf(output, " -2 perform a two-pass analysis\n"); fprintf(output, " -R packet Read filter in Wireshark display filter syntax\n"); + fprintf(output, " (requires -2)\n"); fprintf(output, " -Y packet displaY filter in Wireshark display filter\n"); fprintf(output, " syntax\n"); fprintf(output, " -n disable all name resolutions (def: all enabled)\n");