Commit Graph

1254 Commits

Author SHA1 Message Date
Jeff Morriss a1353706dc Point out that hostname and MAC address resolution in capture filters will not
use any of the Wireshark "personal" files.

This helps to address the complaint in:

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2904

svn path=/trunk/; revision=32452
2010-04-12 21:35:19 +00:00
Jaap Keuter f329cd5bec Add remark about including packet.h before tap.h
svn path=/trunk/; revision=32448
2010-04-12 16:06:52 +00:00
Jeff Morriss 273a6c9cfc As requested in:
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2132

Point to the Wiki's page on capture filter syntax in case neither libpcap's
nor tcpdump's man pages are available (e.g., on Windows).

svn path=/trunk/; revision=32435
2010-04-09 02:09:10 +00:00
Jeff Morriss a40db61842 Revert 31864 and 31866: don't use suffix rules. Pattern rules would work but I don't know if they're portable enough.
svn path=/trunk/; revision=32431
2010-04-08 19:18:05 +00:00
Gerald Combs 1426281ebd Add --enable-setcap-install and --with-dumpcap-group.
svn path=/trunk/; revision=32421
2010-04-08 00:02:29 +00:00
Gerald Combs f05520099c Add a setuid example.
svn path=/trunk/; revision=32418
2010-04-07 17:13:28 +00:00
Gerald Combs 9e0fbd53bb Update to reflect current reality.
svn path=/trunk/; revision=32404
2010-04-06 16:35:05 +00:00
Gerald Combs cf11d2690e Add -X stdin_descr to the man page.
svn path=/trunk/; revision=32358
2010-04-02 02:04:54 +00:00
Anders Broman e3a0cf1fcb From Andrej Kuehnal:
tap-diameter-avp.patch:
- make diameter.cmd_code configurable rather than hard coded in 
- more fields in the output
- documetation/man pages + usage examples
- switch option parser from stdlib to glib to avoid troubles with M$ c++

diameter-dict.patch
remove strage spaces in the AVP names.

svn path=/trunk/; revision=32294
2010-03-26 20:15:55 +00:00
Jeff Morriss 176ccd6068 Clarify that "-b" with the "files" criterion needs either duration or filesize
to be set.

Clarify that each "-b" criterion needs the "-b" option (see bug 4573).

Fix a couple of typos.

svn path=/trunk/; revision=32245
2010-03-19 19:34:16 +00:00
Guy Harris 500eb99cd9 Add a third date format, ABSOLUTE_TIME_DOY_UTC, to show UTC with the
date as YYYY/DDD, where DDD is a 1-origin day of year.  Move the formats
to a "time_fmt.h" file, included by the headers that use it.  Have
abs_time_to_str() and abs_time_secs_to_str() take the date format value,
rather than a Boolean "show this as UTC" flag, as an argument.  Document
the ABSOLUTE_TIME_ formats a bit better.  Use that format in the CCSDS
and VCDU dissectors, rather than having those dissectors do the
formatting themselves.

svn path=/trunk/; revision=32034
2010-02-27 19:01:27 +00:00
Jeff Morriss 04920a8fcd Add descriptions of a few more environment variables that affect *shark's operation
svn path=/trunk/; revision=31973
2010-02-24 05:13:27 +00:00
Bill Meier f7440d43e4 Add note about not using C99 features.
svn path=/trunk/; revision=31933
2010-02-20 17:36:18 +00:00
Guy Harris ba7d64b1a6 Fix a warning from pod2man.
svn path=/trunk/; revision=31911
2010-02-18 01:36:30 +00:00
Gerald Combs 23a90258fb Add an option to capinfos to print start and end times as seconds, which
makes time-shifting using editcap easier. Sort the flags in the capinfos
man page alphabetically to match the other man pages. Add a
time-shifting example to the mergecap man page.

svn path=/trunk/; revision=31905
2010-02-17 20:15:50 +00:00
Jeff Morriss 7250ab254c Hmmm, suffix rules don't have dependencies, only prerequisites.
svn path=/trunk/; revision=31866
2010-02-11 17:25:40 +00:00
Jeff Morriss cca0eb254f Use suffix rules to simplify the man page generation
svn path=/trunk/; revision=31864
2010-02-11 15:58:56 +00:00
Stig Bjørlykke f57d6e2095 From Alex Lindberg via bug 4463:
Added se_tree_lookup32_array_le to emem.[ch].  This function is similar to
se_tree_lookup32_le already defined.

Updated README.binarytrees to reflect this added function and corrected minor
spelling issues.

svn path=/trunk/; revision=31812
2010-02-07 11:01:13 +00:00
Gerald Combs 67ea4d6126 Add a note about filesystem capabilities.
svn path=/trunk/; revision=31686
2010-01-26 20:03:12 +00:00
Guy Harris 94b8c6433b Rewrite the bit about null vs. non-null "tree" dissector arguments a
bit, so as not to imply that there's some form of global "mode"
Wireshark is in when it passes a null or non-null pointer (there isn't),
and to explicitly note that there is *no* guarantee about the value of
"tree" on the first call to the dissector.  (I.e., please do not build a
mental model of how Wireshark works in that regard, and write your
dissector based on that mental model - you *will* be wrong.)

svn path=/trunk/; revision=31560
2010-01-18 23:21:13 +00:00
Bill Meier 061eb4a1c9 Remove repeated blank lines which caused the pod processor to not recognize the following pod directive.
svn path=/trunk/; revision=31372
2009-12-28 15:53:11 +00:00
Bill Meier 5d9f1e8693 Remove repeated blank lines which caused the pod processor to not recognize the following pod directive.
svn path=/trunk/; revision=31371
2009-12-28 14:59:16 +00:00
Guy Harris 8e236e55de For fields of type FT_ABSOLUTE_TIME, have the "display" value be one of
ABSOLUTE_TIME_LOCAL or ABSOLUTE_TIME_UTC, indicating whether to display
the date/time in local time or UTC. (int)ABSOLUTE_TIME_LOCAL ==
(int)BASE_NONE, so there's no source or binary compatiblity issue,
although we might want to eliminate BASE_NONE at some point and have the
BASE_ values used with integral types start at 0, so that you can't
specify BASE_NONE for an integral field.

svn path=/trunk/; revision=31319
2009-12-19 03:17:44 +00:00
Guy Harris ed9f7440e3 Clarify that BASE_RANGE_STRING is a flag set in the display field, not
itself a valid value for that field - it should be ORed with a value.

Indicate that it will never be possible to record in a header_field_info
a byte order for all fields, as some protocols do not specify the
endianness of fields (for example, DCE RPC uses "receiver makes it
right", with the sender sending data in its byte order, with an
indication in the packet of what that byte order is).

svn path=/trunk/; revision=31248
2009-12-12 02:33:16 +00:00
Jaap Keuter 6af0e4e002 From Richard Pecl:
Adding prefs_register_protocol_subtree to libwireshark.def

svn path=/trunk/; revision=31246
2009-12-11 17:35:10 +00:00
Guy Harris 0d337768a7 Split "willcollect" into its two component words.
Document "-z conv,ipv6" for Wireshark.  Rewrite the descriptions of the
"-z conv,{type}" options a bit.

svn path=/trunk/; revision=31233
2009-12-11 02:31:47 +00:00
Guy Harris c6a5eacc1b As long as we have an IPv6 tap, we might as well add a "conv,ipv6"
statistic to TShark.

svn path=/trunk/; revision=31232
2009-12-11 02:19:41 +00:00
Gerald Combs 7c276becfd Add SHA1, RMD160, and MD5 hashes to capinfos.
svn path=/trunk/; revision=31191
2009-12-07 23:18:12 +00:00
Jaap Keuter 47d20fd441 Add documentation for -J and -j command line parameters.
svn path=/trunk/; revision=31038
2009-11-21 10:07:21 +00:00
Jaap Keuter 25470e5663 From Jim Young:
The ability to continue processing additional files if and when 
wtap_open_offline() should fail.  A new -C option reverts to capinfos' 
original behavior which is to cancel any further file processing at 
first file open failure.

Change the behavior of how the default display of all infos is initiated.
This gets rid of a special post getopt() argument count test.

Add new table output format (with related options). This feature allows 
outputting the various infos into a tab delimited text file, or to a comma 
separated variables file (*.csv) instead of the original "long" format.

svn path=/trunk/; revision=30956
2009-11-13 21:43:57 +00:00
Jörg Mayer 632b0aef98 Minor whitespace fixes
svn path=/trunk/; revision=30933
2009-11-11 13:10:25 +00:00
Guy Harris 66f18a0c72 wireshark.pod is now a generated file, generated from
wireshark.pod.template.

svn path=/trunk/; revision=30868
2009-11-08 21:46:19 +00:00
Kovarththanan Rajaratnam 2ffc23cd8b Apply r30854 to Windows Nmakefiles
svn path=/trunk/; revision=30856
2009-11-07 15:55:01 +00:00
Jörg Mayer 7ea503e134 Clean up build process for wireshark.1
svn path=/trunk/; revision=30854
2009-11-07 10:53:11 +00:00
Jaap Keuter 85b8771a03 Add instructions for the cmake files.
svn path=/trunk/; revision=30765
2009-10-30 07:11:41 +00:00
Guy Harris 0551d2edf8 From Nemeth Marton: in an example of a valid (at least at the C language
level) way to handle passing the result of strlen() to a routine
expecting a int-sized value, mark it as "OK", not "Compiler warning".

svn path=/trunk/; revision=30747
2009-10-28 18:19:54 +00:00
Gerald Combs 94837ed1ce Reflect the current status of Windows pipes.
svn path=/trunk/; revision=30723
2009-10-27 00:10:36 +00:00
Jeff Morriss 9341d5c8fa Take a stab at adding a section on environment variables that affect *shark's behavior. So far, all the emem variables are included.
svn path=/trunk/; revision=30648
2009-10-20 20:14:23 +00:00
Anders Broman 9ac672ca81 Update *.vcproj to visual studio 8
svn path=/trunk/; revision=30111
2009-09-24 05:11:47 +00:00
Bill Meier 7b58b17af7 Update: Remove references to the use of check_col() since no longer required.
svn path=/trunk/; revision=29897
2009-09-14 15:28:09 +00:00
Kovarththanan Rajaratnam 49930eff58 We don't use PRId64, PRIu64, PRIx64, PRIX64, and PRIo64 internally in Wireshark, so don't encourage people to use them. Use G_GINT64_FORMAT + friends instead.
svn path=/trunk/; revision=29636
2009-08-31 18:28:10 +00:00
Gerald Combs a25905c840 Add an example for generating CSV output.
svn path=/trunk/; revision=29597
2009-08-28 16:08:27 +00:00
Bill Meier cfde59d509 From dragonlinux AT gmail.com: Fix incorrect location of a right brace;
svn path=/trunk/; revision=29565
2009-08-26 16:39:34 +00:00
Bill Meier 89a44fcd36 Fix a typo
svn path=/trunk/; revision=29241
2009-07-29 23:18:34 +00:00
Guy Harris 5e7b2ff6bd Fix one place where we didn't mention "-t dd".
Put the description of the default time format after the description of
all the time formats, i.e. say "the default is relative" after we say
what "relative" is.

svn path=/trunk/; revision=29089
2009-07-13 23:35:26 +00:00
Jaap Keuter 95a687320f From Reinhard Speyerer:
The description of tshark -t dd is missing from tshark.pod.

svn path=/trunk/; revision=29088
2009-07-13 22:46:32 +00:00
Bill Meier 30957ace48 Add additional indentation to -z <statistics> section to improve readability.
Do some work on "Interface" section to have it match current Wireshark: 
  additionas/changes to "Menu Items" sub-section.
Various other minor reformatting and rewording.

svn path=/trunk/; revision=29081
2009-07-13 14:54:47 +00:00
Bill Meier cdb6af68a4 Add additional indentation to -z <statistics> swction to improve readability.
Various other minor reformatting and rewording.

svn path=/trunk/; revision=29080
2009-07-13 14:29:13 +00:00
Stig Bjørlykke 884ef57f1e From Kovarththanan Rajaratnam:
Update to include the new constraints.

svn path=/trunk/; revision=29015
2009-07-08 08:04:30 +00:00
Guy Harris d5289354ab Recommend the expert mechanism, rather than DISSECTOR_ASSERT(), for
checks that really check whether the packet is valid; DISSECTOR_ASSERT()
should only be used for cases where the dissector is making an
assumption about its internal state.

svn path=/trunk/; revision=29006
2009-07-08 00:57:01 +00:00