forked from osmocom/wireshark
parent
2fb8971136
commit
fae0f7d74a
|
@ -285,12 +285,12 @@ B</s>, a single space will be used. Otherwise any character that can be
|
|||
accepted by the command line as part of the option may be used.
|
||||
|
||||
B<occurrence=f|l|a> Select which occurrence to use for fields that have
|
||||
multiple occurences. If B<f> the first occurrence will be used, if B<l>
|
||||
multiple occurrences. If B<f> the first occurrence will be used, if B<l>
|
||||
the last occurrence will be used and if B<a> all occurrences will be used
|
||||
(this is the default).
|
||||
|
||||
B<aggregator=,|/s|>E<lt>characterE<gt> Set the aggregator character to
|
||||
use for fields that have multiple occurences. If B<,> a comma will be used
|
||||
use for fields that have multiple occurrences. If B<,> a comma will be used
|
||||
(this is the default), if B</s>, a single space will be used. Otherwise
|
||||
any character that can be accepted by the command line as part of the
|
||||
option may be used.
|
||||
|
@ -312,8 +312,7 @@ without a value will list the available formats.
|
|||
=item -G [fields|fields2|fields3|protocols|values|decodes|defaultprefs|currentprefs]
|
||||
|
||||
The B<-G> option will cause B<Tshark> to dump one of several types of glossaries
|
||||
and then exit. If no specfic glossary type if specified then the B<fields> report
|
||||
will be generated by default.
|
||||
and then exit. If no specific glossary type is specified, then the B<fields> report will be generated by default.
|
||||
|
||||
The available report types include:
|
||||
|
||||
|
@ -334,7 +333,7 @@ The fields are tab-delimited.
|
|||
* Field 1 = 'F'
|
||||
* Field 2 = descriptive field name
|
||||
* Field 3 = field abbreviation
|
||||
* Field 4 = type ( textual representation of the the ftenum type )
|
||||
* Field 4 = type ( textual representation of the ftenum type )
|
||||
* Field 5 = parent protocol abbreviation
|
||||
* Field 6 = blurb describing field
|
||||
|
||||
|
@ -731,7 +730,7 @@ Example: B<-z io,stat,0.010,COUNT(smb.sid)smb.sid>
|
|||
This will count the total number of SIDs seen in each 10ms interval.
|
||||
|
||||
SUM(<field>) can only be used on named fields of integer type.
|
||||
This will sum together every occurence of this fields value for each interval.
|
||||
This will sum together every occurrence of this field's value for each interval.
|
||||
|
||||
Example: B<-z io,stat,0.010,SUM(frame.pkt_len)frame.pkt_len>
|
||||
|
||||
|
@ -784,7 +783,7 @@ This feature can be used to append arbitrary fields to the Info column
|
|||
in addition to the normal content of that column.
|
||||
I<field> is the display-filter name of a field which value should be placed
|
||||
in the Info column.
|
||||
I<filter> is a filterstring that controls for which packets the field value
|
||||
I<filter> is a filter string that controls for which packets the field value
|
||||
will be presented in the info column. I<field> will only be presented in the
|
||||
Info column for the packets which match I<filter>.
|
||||
|
||||
|
@ -893,7 +892,7 @@ If the optional I<filter> is provided, the stats will only be calculated
|
|||
on those calls that match that filter.
|
||||
|
||||
Example: B<-z "smb,rtt,ip.addr==1.2.3.4"> will only collect stats for
|
||||
SMB packets echanged by the host at IP address 1.2.3.4 .
|
||||
SMB packets exchanged by the host at IP address 1.2.3.4 .
|
||||
|
||||
=item B<-z> smb,sids
|
||||
|
||||
|
@ -915,8 +914,7 @@ Collect requests/response RTD (Response Time Delay) data for MGCP.
|
|||
(This is similar to B<-z smb,rtt>). Data collected is the number of calls
|
||||
for each known MGCP Type, MinRTD, MaxRTD and AvgRTD.
|
||||
Additionally you get the number of duplicate requests/responses,
|
||||
unresponded requests, responses ,which don't match with
|
||||
any request.
|
||||
unresponded requests, responses, which don't match with any request.
|
||||
Example: B<-z mgcp,rtd>.
|
||||
|
||||
This option can be used multiple times on the command line.
|
||||
|
@ -932,8 +930,7 @@ Collect requests/response RTD (Response Time Delay) data for MEGACO.
|
|||
(This is similar to B<-z smb,rtt>). Data collected is the number of calls
|
||||
for each known MEGACO Type, MinRTD, MaxRTD and AvgRTD.
|
||||
Additionally you get the number of duplicate requests/responses,
|
||||
unresponded requests, responses ,which don't match with
|
||||
any request.
|
||||
unresponded requests, responses, which don't match with any request.
|
||||
Example: B<-z megaco,rtd>.
|
||||
|
||||
If the optional I<filter> is provided, the stats will only be calculated
|
||||
|
@ -947,7 +944,7 @@ This option can be used multiple times on the command line.
|
|||
|
||||
Count ITU-T H.225 messages and their reasons. In the first column you get a
|
||||
list of H.225 messages and H.225 message reasons, which occur in the current
|
||||
capture file. The number of occurences of each message or reason is displayed
|
||||
capture file. The number of occurrences of each message or reason is displayed
|
||||
in the second column.
|
||||
|
||||
Example: B<-z h225,counter>.
|
||||
|
@ -978,7 +975,7 @@ This option can be used multiple times on the command line.
|
|||
=item B<-z> sip,stat[I<,filter>]
|
||||
|
||||
This option will activate a counter for SIP messages. You will get the number
|
||||
of occurences of each SIP Method and of each SIP Status-Code. Additionally you
|
||||
of occurrences of each SIP Method and of each SIP Status-Code. Additionally you
|
||||
also get the number of resent SIP Messages (only for SIP over UDP).
|
||||
|
||||
Example: B<-z sip,stat>.
|
||||
|
|
Loading…
Reference in New Issue