Commit Graph

20 Commits

Author SHA1 Message Date
Jeff Morriss a94c84d34f Add a new environment variable (WIRESHARK_ABORT_ON_OUT_OF_MEMORY) that
prevents OutOfMemory exceptions from being thrown.  This makes it easier
to debug such conditions.

Set this variable in test-fuzzed-cap.sh but not in fuzz-test.sh; it's nice
to see the friendly out-of-memory error message in the bug reports the
latter script generates.

svn path=/trunk/; revision=41656
2012-03-19 02:00:42 +00:00
Jörg Mayer 801392d5d3 The libpcap puts pcap-filter into the misc section (which seems to be 7).
Refer to pcap-filter and mention tcpdump only as a fallback.

svn path=/trunk/; revision=40820
2012-02-03 09:07:24 +00:00
Jörg Mayer 605e6e435a Remove an (almost) duplicate entry
svn path=/trunk/; revision=37461
2011-05-29 14:06:14 +00:00
Jeff Morriss d14bdd492e Add IPFIX_RECORDS_TO_CHECK to the environment variable section.
svn path=/trunk/; revision=34590
2010-10-20 18:00:25 +00:00
Gerald Combs 1cd0689882 Revision 27919 added the ability to feed a libpcap-formatted file to
rawshark but broke the ability to feed it live packets with a
pcap_pkthdr prefix on some 64-bit architectures.

Add a "-p" flag which lets us explicitly handle file-based or
memory-based packet record headers.

svn path=/trunk/; revision=34522
2010-10-15 16:05:06 +00:00
Jeff Morriss 7d20440ff0 Introduce 2 new environment variables: WIRESHARK_EP_VERIFY_POINTERS and
WIRESHARK_SE_VERIFY_POINTERS that control whether or not we verify if a given
pointer is ep_ or se_ allocated, respectively.

Turn the behavior off by default for speed reasons (the speed difference isn't
huge, but...).

Turn the behavior on when fuzz testing.

Document these two new variables in the man pages.

svn path=/trunk/; revision=34046
2010-09-02 18:02:06 +00:00
Gerald Combs e1a9e4e84f From Reinhard Speyerer via bug 4779:
From reading the rawshark(1) manpage my assumption was that rawshark
could be used like
$ /usr/bml/bin/rawshark -s -r test.pcap -d encap:EN10MB ...

However rawshark either expects the -r argument to be -
(read from stdin) or a pipe which results in the following error
message:

rawshark: ".../test.pcap" is neither an interface nor a pipe

The proposed rawshark.pod patch updates the -r description to
the implemented rawshark functionality.

The patch also applies to the current SVN version.

svn path=/trunk/; revision=33063
2010-06-03 00:42:21 +00:00
Guy Harris 6b67ce3ce7 In the section on WIRESHARK_ABORT_ON_DISSECTOR_BUG, give the name of the
program the man page describes, and give a bit more detail.

svn path=/trunk/; revision=32458
2010-04-14 00:46:29 +00:00
Jeff Morriss 6baa3f1abe Add an entry to the environment variable section about WIRESHARK_ABORT_ON_DISSECTOR_BUG
svn path=/trunk/; revision=32457
2010-04-13 22:08:56 +00:00
Jeff Morriss a1353706dc Point out that hostname and MAC address resolution in capture filters will not
use any of the Wireshark "personal" files.

This helps to address the complaint in:

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2904

svn path=/trunk/; revision=32452
2010-04-12 21:35:19 +00:00
Jeff Morriss 04920a8fcd Add descriptions of a few more environment variables that affect *shark's operation
svn path=/trunk/; revision=31973
2010-02-24 05:13:27 +00:00
Bill Meier 061eb4a1c9 Remove repeated blank lines which caused the pod processor to not recognize the following pod directive.
svn path=/trunk/; revision=31372
2009-12-28 15:53:11 +00:00
Jeff Morriss 9341d5c8fa Take a stab at adding a section on environment variables that affect *shark's behavior. So far, all the emem variables are included.
svn path=/trunk/; revision=30648
2009-10-20 20:14:23 +00:00
Bill Meier 910c5bd1a0 SYNOPSYS --> SYNOPSIS
svn path=/trunk/; revision=28338
2009-05-12 21:10:38 +00:00
Guy Harris 96812ede55 Describe the format of libpcap records a little better - no, it's not
valid C89, but it's more accurate (and lets you know that the packet
data has only caplen bytes).

Fix up a list.

svn path=/trunk/; revision=27925
2009-04-01 20:52:53 +00:00
Gerald Combs 4400c3393e Rawshark fixes from Duncan Salerno.
svn path=/trunk/; revision=27919
2009-03-31 23:38:31 +00:00
Guy Harris 1514fcff5f Have the minimum snapshot length be 1 byte, and have a snapshot length
of 0 mean 65535, similar to what tcpdump does.

Fixes bug 2731.

svn path=/trunk/; revision=27526
2009-02-23 19:00:30 +00:00
Gerald Combs 71d81e88b1 Make some text verbatim.
svn path=/trunk/; revision=24585
2008-03-07 23:44:40 +00:00
Gerald Combs 87cc9c5090 Remove extra copies of the content.
svn path=/trunk/; revision=24362
2008-02-16 17:29:11 +00:00
Gerald Combs 98bacb3556 Add rawshark, a utility that, when given raw pcap-formatted packets and
a list of fields, prints the field values found in each packet.

Packet data can be specified as a libpcap DLT, e.g. "EN10MB" or an upper-layer protocol, e.g. "http".

svn path=/trunk/; revision=24339
2008-02-15 23:20:32 +00:00