osmith
/
wireshark
forked from osmocom/wireshark
1
0
Fork 0
Code Pull Requests Releases Wiki Activity

WSUG/tshark: protocol summary and output with "-e"

This commit is contained in:
Chuck Craft 2022-04-07 12:41:06 -05:00 committed by A Wireshark GitLab Utility
parent b5fef40379
commit b52437ba28
2 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
doc/tshark.adoc
View File

@ -350,10 +350,13 @@ selected. Column names may be used prefixed with "_ws.col."
Example: *tshark -e frame.number -e ip.addr -e udp -e _ws.col.Info*
Giving a protocol rather than a single field will print multiple items
of data about the protocol as a single field. Fields are separated by
tab characters by default. *-E* controls the format of the printed
fields.
Fields are separated by tab characters by default. *-E* controls the
format of the printed fields.
Giving a protocol rather than a single field will print the protocol summary
(subtree label) from the packet details as a single field.
If the protocol summary contains only the protocol name
(e.g. "Hypertext Transfer Protocol") then the protocol filter name ("http")
will be printed.
--
-E <field print option>::

4
docbook/wsug_src/WSUG_chapter_use.adoc
View File

@ -1006,8 +1006,8 @@ pane) in a more detailed form.
image::wsug_graphics/ws-details-pane.png[{screenshot-attrs}]
This pane shows the protocols and protocol fields of the packet selected in the
“Packet List” pane. The protocols and fields of the packet shown in a tree
which can be expanded and collapsed.
“Packet List” pane. The protocol summary lines (subtree labels) and fields of the
packet are shown in a tree which can be expanded and collapsed.
There is a context menu (right mouse click) available. See details in
<<ChWorkPacketDetailsPanePopUpMenu>>.