osmocom
/
wireshark
11
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

dumpcap(1): update some old "pcap as default format" text. 

Speak of dumpcap writing a "capture file" rather than a "pcap file".

Use .pcapng rather than .pcap as the extension in sample capture file
names.

In the description of the -i option, explicitly mention the -P option as
being overridden if more than one -i option is specified.
This commit is contained in:
Guy Harris 2023-05-17 19:10:39 -07:00 committed by John Thacker
parent ef0b1fe80a
commit 9ef9fbeddf
1 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
doc/dumpcap.adoc
View File

@ -58,10 +58,10 @@ When the *-P* option is specified, the output file is written in the
Without any options set it will use the libpcap, Npcap, or WinPcap library to
capture traffic from the first available network interface and writes
the received raw packet data, along with the packets' time stamps into a
pcap file.
capture file.
If the *-w* option is not specified, *Dumpcap* writes to a newly
created pcap file with a randomly chosen name.
created capture file with a randomly chosen name.
If the *-w* option is specified, *Dumpcap* writes to the file
specified by that option.
@ -99,9 +99,10 @@ Cause *Dumpcap* to run in "multiple files" mode. In "multiple files" mode,
*Dumpcap* will write to several capture files. When the first capture file
fills up, *Dumpcap* will switch writing to the next file and so on.
The created filenames are based on the filename given with the *-w* option,
the number of the file and on the creation date and time,
e.g. outfile_00001_20230714120117.pcap, outfile_00002_20230714120523.pcap, ...
The created filenames are based on the filename given with the *-w*
option, the number of the file and on the creation date and time, e.g.
outfile_00001_20230714120117.pcapng,
outfile_00002_20230714120523.pcapng, ...
With the __files__ option it's also possible to form a "ring buffer".
This will fill up new files until the number of files specified,
@ -259,7 +260,8 @@ endianness as the capturing host.
specified port on the specified host and read pcapng or pcap data.
This option can occur multiple times. When capturing from multiple
interfaces, the capture file will be saved in pcapng format.
interfaces, the capture file will be saved in pcapng format, even if
*-P* is specified.
--
--ifdescr> <description>::