d6da95231e
sshdump is an extcap module that allows dumping from a remote host using an ssh connection. It goes with the existing extcap plugin interface. Change-Id: I8987614fdd817b8173a50130812bc643a4833bca Reviewed-on: https://code.wireshark.org/review/11402 Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
107 lines
2.6 KiB
Text
107 lines
2.6 KiB
Text
|
|
=head1 NAME
|
|
|
|
extcap - Extcap grammar elements
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
Grammar elements:
|
|
|
|
=over 4
|
|
|
|
=item arg (options)
|
|
|
|
argument for CLI calling
|
|
|
|
=item number
|
|
|
|
Reference # of argument for other values, display order
|
|
|
|
=item call
|
|
|
|
Literal argument to call (--call=...)
|
|
|
|
=item display
|
|
|
|
Displayed name
|
|
|
|
=item default
|
|
|
|
Default value, in proper form for type
|
|
|
|
=item range
|
|
|
|
Range of valid values for UI checking (min,max) in proper form
|
|
|
|
=item type
|
|
|
|
Argument type for UI filtering for raw, or UI type for selector:
|
|
|
|
integer
|
|
unsigned
|
|
long (may include scientific / special notation)
|
|
float
|
|
selector (display selector table, all values as strings)
|
|
boolean (display checkbox)
|
|
radio (display group of radio buttons with provided values, all values as strings)
|
|
fileselect (display a dialog to select a file from the filesystem, value as string)
|
|
multicheck (display a textbox for selecting multiple options, values as strings)
|
|
|
|
=item value (options)
|
|
|
|
Values for argument selection
|
|
arg Argument # this value applies to
|
|
|
|
=back
|
|
|
|
=head1 EXAMPLES
|
|
|
|
Example 1:
|
|
|
|
arg {number=0}{call=channel}{display=Wi-Fi Channel}{type=integer}
|
|
arg {number=1}{call=chanflags}{display=Channel Flags}{type=radio}
|
|
arg {number=2}{call=interface}{display=Interface}{type=selector}
|
|
value {arg=0}{range=1,11}
|
|
value {arg=1}{value=ht40p}{display=HT40+}
|
|
value {arg=1}{value=ht40m}{display=HT40-}
|
|
value {arg=1}{value=ht20}{display=HT20}
|
|
value {arg=2}{value=wlan0}{display=wlan0}
|
|
|
|
Example 2:
|
|
|
|
arg {number=0}{call=usbdevice}{USB Device}{type=selector}
|
|
value {arg=0}{call=/dev/sysfs/usb/foo/123}{display=Ubertooth One sn 1234}
|
|
value {arg=0}{call=/dev/sysfs/usb/foo/456}{display=Ubertooth One sn 8901}
|
|
|
|
Example 3:
|
|
|
|
arg {number=0}{call=usbdevice}{USB Device}{type=selector}
|
|
flag {failure=Permission denied opening Ubertooth device}
|
|
|
|
=head1 Security awareness
|
|
|
|
=over 4
|
|
|
|
=item - Users running wireshark as root, we can't save you
|
|
|
|
=item - Dumpcap retains suid/setgid and group+x permissions to allow users in wireshark group only
|
|
|
|
=item - Third-party capture programs run w/ whatever privs they're installed with
|
|
|
|
=item - If an attacker can write to a system binary directory, we're game over anyhow
|
|
|
|
=item - Don't let wireshark be told to look for capture binaries somewhere else?
|
|
|
|
=back
|
|
|
|
=head1 SEE ALSO
|
|
|
|
wireshark(1), tshark(1), dumpcap(1), androiddump(1), sshdump(1)
|
|
|
|
=head1 NOTES
|
|
|
|
B<Extcap> is feature of B<Wireshark>. The latest version
|
|
of B<Wireshark> can be found at L<https://www.wireshark.org>.
|
|
|
|
HTML versions of the Wireshark project man pages are available at:
|
|
L<https://www.wireshark.org/docs/man-pages>. |