Commit Graph

14 Commits

Author SHA1 Message Date
Gerald Combs e1a9e4e84f From Reinhard Speyerer via bug 4779:
From reading the rawshark(1) manpage my assumption was that rawshark
could be used like
$ /usr/bml/bin/rawshark -s -r test.pcap -d encap:EN10MB ...

However rawshark either expects the -r argument to be -
(read from stdin) or a pipe which results in the following error
message:

rawshark: ".../test.pcap" is neither an interface nor a pipe

The proposed rawshark.pod patch updates the -r description to
the implemented rawshark functionality.

The patch also applies to the current SVN version.

svn path=/trunk/; revision=33063
2010-06-03 00:42:21 +00:00
Guy Harris 6b67ce3ce7 In the section on WIRESHARK_ABORT_ON_DISSECTOR_BUG, give the name of the
program the man page describes, and give a bit more detail.

svn path=/trunk/; revision=32458
2010-04-14 00:46:29 +00:00
Jeff Morriss 6baa3f1abe Add an entry to the environment variable section about WIRESHARK_ABORT_ON_DISSECTOR_BUG
svn path=/trunk/; revision=32457
2010-04-13 22:08:56 +00:00
Jeff Morriss a1353706dc Point out that hostname and MAC address resolution in capture filters will not
use any of the Wireshark "personal" files.

This helps to address the complaint in:

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2904

svn path=/trunk/; revision=32452
2010-04-12 21:35:19 +00:00
Jeff Morriss 04920a8fcd Add descriptions of a few more environment variables that affect *shark's operation
svn path=/trunk/; revision=31973
2010-02-24 05:13:27 +00:00
Bill Meier 061eb4a1c9 Remove repeated blank lines which caused the pod processor to not recognize the following pod directive.
svn path=/trunk/; revision=31372
2009-12-28 15:53:11 +00:00
Jeff Morriss 9341d5c8fa Take a stab at adding a section on environment variables that affect *shark's behavior. So far, all the emem variables are included.
svn path=/trunk/; revision=30648
2009-10-20 20:14:23 +00:00
Bill Meier 910c5bd1a0 SYNOPSYS --> SYNOPSIS
svn path=/trunk/; revision=28338
2009-05-12 21:10:38 +00:00
Guy Harris 96812ede55 Describe the format of libpcap records a little better - no, it's not
valid C89, but it's more accurate (and lets you know that the packet
data has only caplen bytes).

Fix up a list.

svn path=/trunk/; revision=27925
2009-04-01 20:52:53 +00:00
Gerald Combs 4400c3393e Rawshark fixes from Duncan Salerno.
svn path=/trunk/; revision=27919
2009-03-31 23:38:31 +00:00
Guy Harris 1514fcff5f Have the minimum snapshot length be 1 byte, and have a snapshot length
of 0 mean 65535, similar to what tcpdump does.

Fixes bug 2731.

svn path=/trunk/; revision=27526
2009-02-23 19:00:30 +00:00
Gerald Combs 71d81e88b1 Make some text verbatim.
svn path=/trunk/; revision=24585
2008-03-07 23:44:40 +00:00
Gerald Combs 87cc9c5090 Remove extra copies of the content.
svn path=/trunk/; revision=24362
2008-02-16 17:29:11 +00:00
Gerald Combs 98bacb3556 Add rawshark, a utility that, when given raw pcap-formatted packets and
a list of fields, prints the field values found in each packet.

Packet data can be specified as a libpcap DLT, e.g. "EN10MB" or an upper-layer protocol, e.g. "http".

svn path=/trunk/; revision=24339
2008-02-15 23:20:32 +00:00