Commit Graph

1265 Commits

Author SHA1 Message Date
Bill Meier 93a82410e3 Update capinfos man page.
svn path=/trunk/; revision=32653
2010-05-03 20:38:06 +00:00
Stephen Fisher 66d48120c2 Change two instances of "an Wireshark plugin" to "a Wireshark plugin".
The use of "an" must have been leftover from the Ethereal days ("an
Ethereal plugin").


svn path=/trunk/; revision=32639
2010-05-02 23:39:58 +00:00
Stephen Fisher 63a9ceeb6c Change copyright date in sample dissector code to 201x from 200x for the
new decade.


svn path=/trunk/; revision=32553
2010-04-25 08:23:12 +00:00
Jeff Morriss 6c5201f39a 64-bit integers take the same FIELDDISPLAY as shorter integers
svn path=/trunk/; revision=32551
2010-04-24 14:53:30 +00:00
Bill Meier 17b57d46d3 Simplify Makefile.nmake so that adding a new plugin to Makefile.nmake
requires only adding the plugin (directory) name to a list of plugins.

svn path=/trunk/; revision=32516
2010-04-19 14:38:20 +00:00
Bill Meier e635180aeb (Trivial changes)
svn path=/trunk/; revision=32497
2010-04-16 17:28:03 +00:00
Bill Meier e740706aeb Updates:
1. Include stdio.h, stdlib.h and string.h only if needed;
2. Add dissector source filename to epan/CMakeLists.txt as well as 
   epan/Makefile.common.

svn path=/trunk/; revision=32495
2010-04-16 16:37:31 +00:00
Guy Harris fd29d27282 Rename FIELDBASE to FIELDDISPLAY, as it's a "how to display this"
indication, not necessarily a base (the base is "how to display" some
numeric fields, but it's not how to display some other fields).

Note that FIELDDISPLAY is the number of bits in the field containing an
FT_BOOLEAN bitfield.

svn path=/trunk/; revision=32480
2010-04-15 20:54:27 +00:00
Bill Meier b92603b395 Fix a typo
svn path=/trunk/; revision=32475
2010-04-15 19:33:33 +00:00
Guy Harris 6b67ce3ce7 In the section on WIRESHARK_ABORT_ON_DISSECTOR_BUG, give the name of the
program the man page describes, and give a bit more detail.

svn path=/trunk/; revision=32458
2010-04-14 00:46:29 +00:00
Jeff Morriss 6baa3f1abe Add an entry to the environment variable section about WIRESHARK_ABORT_ON_DISSECTOR_BUG
svn path=/trunk/; revision=32457
2010-04-13 22:08:56 +00:00
Jeff Morriss a1353706dc Point out that hostname and MAC address resolution in capture filters will not
use any of the Wireshark "personal" files.

This helps to address the complaint in:

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2904

svn path=/trunk/; revision=32452
2010-04-12 21:35:19 +00:00
Jaap Keuter f329cd5bec Add remark about including packet.h before tap.h
svn path=/trunk/; revision=32448
2010-04-12 16:06:52 +00:00
Jeff Morriss 273a6c9cfc As requested in:
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2132

Point to the Wiki's page on capture filter syntax in case neither libpcap's
nor tcpdump's man pages are available (e.g., on Windows).

svn path=/trunk/; revision=32435
2010-04-09 02:09:10 +00:00
Jeff Morriss a40db61842 Revert 31864 and 31866: don't use suffix rules. Pattern rules would work but I don't know if they're portable enough.
svn path=/trunk/; revision=32431
2010-04-08 19:18:05 +00:00
Gerald Combs 1426281ebd Add --enable-setcap-install and --with-dumpcap-group.
svn path=/trunk/; revision=32421
2010-04-08 00:02:29 +00:00
Gerald Combs f05520099c Add a setuid example.
svn path=/trunk/; revision=32418
2010-04-07 17:13:28 +00:00
Gerald Combs 9e0fbd53bb Update to reflect current reality.
svn path=/trunk/; revision=32404
2010-04-06 16:35:05 +00:00
Gerald Combs cf11d2690e Add -X stdin_descr to the man page.
svn path=/trunk/; revision=32358
2010-04-02 02:04:54 +00:00
Anders Broman e3a0cf1fcb From Andrej Kuehnal:
tap-diameter-avp.patch:
- make diameter.cmd_code configurable rather than hard coded in 
- more fields in the output
- documetation/man pages + usage examples
- switch option parser from stdlib to glib to avoid troubles with M$ c++

diameter-dict.patch
remove strage spaces in the AVP names.

svn path=/trunk/; revision=32294
2010-03-26 20:15:55 +00:00
Jeff Morriss 176ccd6068 Clarify that "-b" with the "files" criterion needs either duration or filesize
to be set.

Clarify that each "-b" criterion needs the "-b" option (see bug 4573).

Fix a couple of typos.

svn path=/trunk/; revision=32245
2010-03-19 19:34:16 +00:00
Guy Harris 500eb99cd9 Add a third date format, ABSOLUTE_TIME_DOY_UTC, to show UTC with the
date as YYYY/DDD, where DDD is a 1-origin day of year.  Move the formats
to a "time_fmt.h" file, included by the headers that use it.  Have
abs_time_to_str() and abs_time_secs_to_str() take the date format value,
rather than a Boolean "show this as UTC" flag, as an argument.  Document
the ABSOLUTE_TIME_ formats a bit better.  Use that format in the CCSDS
and VCDU dissectors, rather than having those dissectors do the
formatting themselves.

svn path=/trunk/; revision=32034
2010-02-27 19:01:27 +00:00
Jeff Morriss 04920a8fcd Add descriptions of a few more environment variables that affect *shark's operation
svn path=/trunk/; revision=31973
2010-02-24 05:13:27 +00:00
Bill Meier f7440d43e4 Add note about not using C99 features.
svn path=/trunk/; revision=31933
2010-02-20 17:36:18 +00:00
Guy Harris ba7d64b1a6 Fix a warning from pod2man.
svn path=/trunk/; revision=31911
2010-02-18 01:36:30 +00:00
Gerald Combs 23a90258fb Add an option to capinfos to print start and end times as seconds, which
makes time-shifting using editcap easier. Sort the flags in the capinfos
man page alphabetically to match the other man pages. Add a
time-shifting example to the mergecap man page.

svn path=/trunk/; revision=31905
2010-02-17 20:15:50 +00:00
Jeff Morriss 7250ab254c Hmmm, suffix rules don't have dependencies, only prerequisites.
svn path=/trunk/; revision=31866
2010-02-11 17:25:40 +00:00
Jeff Morriss cca0eb254f Use suffix rules to simplify the man page generation
svn path=/trunk/; revision=31864
2010-02-11 15:58:56 +00:00
Stig Bjørlykke f57d6e2095 From Alex Lindberg via bug 4463:
Added se_tree_lookup32_array_le to emem.[ch].  This function is similar to
se_tree_lookup32_le already defined.

Updated README.binarytrees to reflect this added function and corrected minor
spelling issues.

svn path=/trunk/; revision=31812
2010-02-07 11:01:13 +00:00
Gerald Combs 67ea4d6126 Add a note about filesystem capabilities.
svn path=/trunk/; revision=31686
2010-01-26 20:03:12 +00:00
Guy Harris 94b8c6433b Rewrite the bit about null vs. non-null "tree" dissector arguments a
bit, so as not to imply that there's some form of global "mode"
Wireshark is in when it passes a null or non-null pointer (there isn't),
and to explicitly note that there is *no* guarantee about the value of
"tree" on the first call to the dissector.  (I.e., please do not build a
mental model of how Wireshark works in that regard, and write your
dissector based on that mental model - you *will* be wrong.)

svn path=/trunk/; revision=31560
2010-01-18 23:21:13 +00:00
Bill Meier 061eb4a1c9 Remove repeated blank lines which caused the pod processor to not recognize the following pod directive.
svn path=/trunk/; revision=31372
2009-12-28 15:53:11 +00:00
Bill Meier 5d9f1e8693 Remove repeated blank lines which caused the pod processor to not recognize the following pod directive.
svn path=/trunk/; revision=31371
2009-12-28 14:59:16 +00:00
Guy Harris 8e236e55de For fields of type FT_ABSOLUTE_TIME, have the "display" value be one of
ABSOLUTE_TIME_LOCAL or ABSOLUTE_TIME_UTC, indicating whether to display
the date/time in local time or UTC. (int)ABSOLUTE_TIME_LOCAL ==
(int)BASE_NONE, so there's no source or binary compatiblity issue,
although we might want to eliminate BASE_NONE at some point and have the
BASE_ values used with integral types start at 0, so that you can't
specify BASE_NONE for an integral field.

svn path=/trunk/; revision=31319
2009-12-19 03:17:44 +00:00
Guy Harris ed9f7440e3 Clarify that BASE_RANGE_STRING is a flag set in the display field, not
itself a valid value for that field - it should be ORed with a value.

Indicate that it will never be possible to record in a header_field_info
a byte order for all fields, as some protocols do not specify the
endianness of fields (for example, DCE RPC uses "receiver makes it
right", with the sender sending data in its byte order, with an
indication in the packet of what that byte order is).

svn path=/trunk/; revision=31248
2009-12-12 02:33:16 +00:00
Jaap Keuter 6af0e4e002 From Richard Pecl:
Adding prefs_register_protocol_subtree to libwireshark.def

svn path=/trunk/; revision=31246
2009-12-11 17:35:10 +00:00
Guy Harris 0d337768a7 Split "willcollect" into its two component words.
Document "-z conv,ipv6" for Wireshark.  Rewrite the descriptions of the
"-z conv,{type}" options a bit.

svn path=/trunk/; revision=31233
2009-12-11 02:31:47 +00:00
Guy Harris c6a5eacc1b As long as we have an IPv6 tap, we might as well add a "conv,ipv6"
statistic to TShark.

svn path=/trunk/; revision=31232
2009-12-11 02:19:41 +00:00
Gerald Combs 7c276becfd Add SHA1, RMD160, and MD5 hashes to capinfos.
svn path=/trunk/; revision=31191
2009-12-07 23:18:12 +00:00
Jaap Keuter 47d20fd441 Add documentation for -J and -j command line parameters.
svn path=/trunk/; revision=31038
2009-11-21 10:07:21 +00:00
Jaap Keuter 25470e5663 From Jim Young:
The ability to continue processing additional files if and when 
wtap_open_offline() should fail.  A new -C option reverts to capinfos' 
original behavior which is to cancel any further file processing at 
first file open failure.

Change the behavior of how the default display of all infos is initiated.
This gets rid of a special post getopt() argument count test.

Add new table output format (with related options). This feature allows 
outputting the various infos into a tab delimited text file, or to a comma 
separated variables file (*.csv) instead of the original "long" format.

svn path=/trunk/; revision=30956
2009-11-13 21:43:57 +00:00
Jörg Mayer 632b0aef98 Minor whitespace fixes
svn path=/trunk/; revision=30933
2009-11-11 13:10:25 +00:00
Guy Harris 66f18a0c72 wireshark.pod is now a generated file, generated from
wireshark.pod.template.

svn path=/trunk/; revision=30868
2009-11-08 21:46:19 +00:00
Kovarththanan Rajaratnam 2ffc23cd8b Apply r30854 to Windows Nmakefiles
svn path=/trunk/; revision=30856
2009-11-07 15:55:01 +00:00
Jörg Mayer 7ea503e134 Clean up build process for wireshark.1
svn path=/trunk/; revision=30854
2009-11-07 10:53:11 +00:00
Jaap Keuter 85b8771a03 Add instructions for the cmake files.
svn path=/trunk/; revision=30765
2009-10-30 07:11:41 +00:00
Guy Harris 0551d2edf8 From Nemeth Marton: in an example of a valid (at least at the C language
level) way to handle passing the result of strlen() to a routine
expecting a int-sized value, mark it as "OK", not "Compiler warning".

svn path=/trunk/; revision=30747
2009-10-28 18:19:54 +00:00
Gerald Combs 94837ed1ce Reflect the current status of Windows pipes.
svn path=/trunk/; revision=30723
2009-10-27 00:10:36 +00:00
Jeff Morriss 9341d5c8fa Take a stab at adding a section on environment variables that affect *shark's behavior. So far, all the emem variables are included.
svn path=/trunk/; revision=30648
2009-10-20 20:14:23 +00:00
Anders Broman 9ac672ca81 Update *.vcproj to visual studio 8
svn path=/trunk/; revision=30111
2009-09-24 05:11:47 +00:00