doc: add the -d (decode as) option to wireshark(1)

Text is partially copied from the tshark manual page.

Change-Id: I120e327f15394fc48fce6e4a122e7eab83e91c82
Reviewed-on: https://code.wireshark.org/review/17904
Reviewed-by: Michael Mann <mmann78@netscape.net>

1 files changed, 13 insertions, 0 deletions

diff --git a/doc/wireshark.pod.template b/doc/wireshark.pod.template
index 990774804d..c098e3f627 100644
--- a/doc/wireshark.pod.template
+++ b/doc/wireshark.pod.template
@@ -16,6 +16,7 @@ S<[ B<-b> E<lt>capture ring buffer optionE<gt> ] ...>
 S<[ B<-B> E<lt>capture buffer sizeE<gt> ] >
 S<[ B<-c> E<lt>capture packet countE<gt> ]>
 S<[ B<-C> E<lt>configuration profileE<gt> ]>
+S<[ B<-d> E<lt>layer typeE<gt>==E<lt>selectorE<gt>,E<lt>decode-as protocolE<gt> ]>
 S<[ B<-D> ]>
 S<[ B<--display=>E<lt>X display to useE<gt> ] >
 S<[ B<-f> E<lt>capture filterE<gt> ]>
@@ -311,6 +312,18 @@ data.
 
 Start with the given configuration profile.
 
+=item -d  E<lt>layer typeE<gt>==E<lt>selectorE<gt>,E<lt>decode-as protocolE<gt>
+
+Like Wireshark's B<Decode As...> feature, this lets you specify how a
+layer type should be dissected.  If the layer type in question (for example,
+B<tcp.port> or B<udp.port> for a TCP or UDP port number) has the specified
+selector value, packets should be dissected as the specified protocol.
+
+Example: B<-d tcp.port==8888,http> will decode any traffic running over
+TCP port 8888 as HTTP.
+
+See the tshark(1) manual page for more examples.
+
 =item -D
 
 Print a list of the interfaces on which B<Wireshark> can capture, and