Live data capture and display enhancement that allows network capture and

display of fully decoded packets at the same time.
Options added:
-F : fork capture process
-S : sync mode ala tail -f (implies -F)
-f : filter expression
-Q : exit after capture (implies -k)

svn path=/trunk/; revision=277

1 files changed, 33 insertions, 0 deletions

diff --git a/doc/ethereal.pod b/doc/ethereal.pod
index e783d3a5c9..04fe359422 100644
--- a/doc/ethereal.pod
+++ b/doc/ethereal.pod
@@ -9,12 +9,17 @@ B<ethereal>
 S<[ B<-B> byte view height ]>
 S<[ B<-b> bold font ]>
 S<[ B<-c> count ]>
+S<[ B<-F> ]>
+S<[ B<-f> filter expression ]>
 S<[ B<-h> ]>
 S<[ B<-i> interface ]> 
+S<[ B<-k> ]>
 S<[ B<-m> font ]>
 S<[ B<-n> ]>
 S<[ B<-P> packet list height ]>
+S<[ B<-Q> ]>
 S<[ B<-r> infile ]>
+S<[ B<-S> ]>
 S<[ B<-s> snaplen ]>
 S<[ B<-T> tree view height ]>
 S<[ B<-t> time stamp format ]>
@@ -43,6 +48,16 @@ The bold font name used for packet fied display.
 
 The default number of packets to read when capturing live data.
 
+=item -F
+
+Specifies that the live packet capture will be performed in a separate
+process. It is then possible to open/reload the file to display the
+packets actually captured.
+
+=item -f
+
+Sets a filter expression.
+
 =item -h
 
 Prints the version and options and exits.
@@ -52,6 +67,11 @@ Prints the version and options and exits.
 The name of the interface to use for live packet capture.  It should match
 one of the names listed in "B<netstat -i>" or "B<ifconfig -a>".
 
+=item -k
+
+Start the capture session immediately, this option requires 
+the B<-i> and B<-w> parameters.
+
 =item -m
 
 The font name used by B<Ethereal>.
@@ -65,11 +85,24 @@ names).
 
 Sets the initial height of the packet list (top) pane
 
+=item -Q
+
+Exit after the end of capture session (useful in batch mode with B<-c> 
+option for instance), this option requires the B<-i> and B<-w> 
+parameters.
+
 =item -r
 
 Read packet data from I<file>.  Currently, B<Ethereal> only understands
 B<pcap> / B<tcpdump> formatted files.
 
+=item -S
+
+Specifies that the live packet capture will be performed in a separate
+process (same as option B<-F>) and that the packet displaying should be
+synchronized with the capture session without human operation 
+(i.e. without load/reload). This is an experimental feature.
+
 =item -s
 
 The default snapshot length to use when capturing live data.  No more than