aboutsummaryrefslogtreecommitdiffstats
path: root/doc
Commit message (Collapse)AuthorAgeFilesLines
* Add IPFIX_RECORDS_TO_CHECK to the environment variable section.Jeff Morriss2010-10-203-0/+21
| | | | svn path=/trunk/; revision=34590
* Revision 27919 added the ability to feed a libpcap-formatted file toGerald Combs2010-10-151-2/+25
| | | | | | | | | | rawshark but broke the ability to feed it live packets with a pcap_pkthdr prefix on some 64-bit architectures. Add a "-p" flag which lets us explicitly handle file-based or memory-based packet record headers. svn path=/trunk/; revision=34522
* Rework "extended value strings":Bill Meier2010-10-141-5/+21
| | | | | | | | | - Allow direct access when a range of values begins with a value other than 0; - Provide value_string_ext_new() for creating extended value strings at runtime; - Do access to value_string_ext members via a macro (all but value_string.c); - Update documentation. svn path=/trunk/; revision=34514
* NEARLY → OVER.Gerald Combs2010-10-011-1/+1
| | | | svn path=/trunk/; revision=34311
* Introduce 2 new environment variables: WIRESHARK_EP_VERIFY_POINTERS andJeff Morriss2010-09-023-16/+58
| | | | | | | | | | | | | | WIRESHARK_SE_VERIFY_POINTERS that control whether or not we verify if a given pointer is ep_ or se_ allocated, respectively. Turn the behavior off by default for speed reasons (the speed difference isn't huge, but...). Turn the behavior on when fuzz testing. Document these two new variables in the man pages. svn path=/trunk/; revision=34046
* Add ws_load_library and ws_module_open, which respectively callGerald Combs2010-08-251-1/+1
| | | | | | | | | LoadLibrary and g_module_open only for the program directory and system directory on Windows. Use them to replace a bunch of LoadLibrary and g_module_open calls. Use the extension ".dll" for all the DLLs that we load. Add comments about DLL loading in Python. svn path=/trunk/; revision=33924
* Document what prefs_register_string_preference() does with your value pointer.Jeff Morriss2010-08-211-2/+7
| | | | svn path=/trunk/; revision=33873
* Remove an incorrect line of code from the proto_reg_hanoff prototype.Bill Meier2010-08-121-2/+0
| | | | svn path=/trunk/; revision=33790
* Fix grammaro, indent example code.Guy Harris2010-07-271-8/+9
| | | | svn path=/trunk/; revision=33641
* Tell people to be careful about loops likeGuy Harris2010-07-271-0/+11
| | | | | | | | | for (guint8 = 0; guint8 < guint; guint8++) (one of which recently caused an infinite loop with a fuzzed packet in the buildbot). svn path=/trunk/; revision=33639
* Don't clean wireshark-filter.pod. It's not generated any more.Gerald Combs2010-07-151-1/+1
| | | | svn path=/trunk/; revision=33540
* Don't include the filter list (which is now over 16MB) in theGerald Combs2010-07-154-26/+26
| | | | | | wireshark-filter man page. Point to other sources for the list instead. svn path=/trunk/; revision=33539
* Add an option to print the first, the last or all occurrences of each fieldSake Blok2010-07-141-0/+5
| | | | | | | (when using tshark -T fields) svn path=/trunk/; revision=33529
* Make 'tshark -T fields' print all values for fields with multiple occurences.Sake Blok2010-07-141-1/+7
| | | | svn path=/trunk/; revision=33527
* Fix a typo.Gerald Combs2010-07-141-12/+12
| | | | svn path=/trunk/; revision=33520
* Add dftest.pod and randpkt.pod to the release tarball.Guy Harris2010-07-141-4/+6
| | | | | | Clean up tabs. svn path=/trunk/; revision=33516
* Add a "-d" flag to dumpcap, to print out the generated code for theGuy Harris2010-07-131-0/+6
| | | | | | | capture filter in human-readable form. (Well, readable by humans who know BPF machine language, at least. :-)) svn path=/trunk/; revision=33509
* From Jan Šafránek:Jaap Keuter2010-07-133-3/+173
| | | | | | | | dftest and randpkt are installed during make install, but they are not documented in any man page. This is a start. It's more or less a compilation of information found elsewhere. svn path=/trunk/; revision=33504
* Add Visual C++ project files to the distribution.Gerald Combs2010-06-301-0/+2
| | | | svn path=/trunk/; revision=33386
* Remove documentation of Object Identifier configuration files, as a UAT is ↵Graeme Lunt2010-06-281-62/+0
| | | | | | now used. svn path=/trunk/; revision=33347
* Update with documentation on the object identifier configuration files.Graeme Lunt2010-06-241-0/+62
| | | | svn path=/trunk/; revision=33311
* Update to reflect changes in defines: REP_* > ENC_*Stig Bjørlykke2010-06-221-9/+9
| | | | svn path=/trunk/; revision=33286
* From Jim Young:Anders Broman2010-06-181-0/+92
| | | | | | | | | The attached patch simply documents a long supported but hidden tshark -G option. Tshark's print_usage() has been augmented as well as the tshark man page. svn path=/trunk/; revision=33253
* From Reinhard Speyerer via bug 4779:Gerald Combs2010-06-031-4/+5
| | | | | | | | | | | | | | | | | | | From reading the rawshark(1) manpage my assumption was that rawshark could be used like $ /usr/bml/bin/rawshark -s -r test.pcap -d encap:EN10MB ... However rawshark either expects the -r argument to be - (read from stdin) or a pipe which results in the following error message: rawshark: ".../test.pcap" is neither an interface nor a pipe The proposed rawshark.pod patch updates the -r description to the implemented rawshark functionality. The patch also applies to the current SVN version. svn path=/trunk/; revision=33063
* From Jim Young via bug 4331:Gerald Combs2010-06-021-0/+42
| | | | | | | | | | | | | | This patch adds a new '-S' option to editcap that will rewrite timestamps of packets to insure that the new capture file is in strict chronological order. This option's primary use case is to fixup the occasional timestamps that have a negative delta time relative to previous packet. This feature is related to (but does not depend on) capinfos enhancement submitted in bug #4315 which helps identify tracefiles with "out-of-order" packets. svn path=/trunk/; revision=33042
* From Jim Young via bug 4049:Gerald Combs2010-06-021-0/+7
| | | | | | | | This patch adds a new '-o' option to capinfos (enabled by default) to report if the packets within a particular capture file are in strict chronological time order or not. svn path=/trunk/; revision=33041
* Copy the (no longer Win32-specific) description of the -B option to the ↵Jeff Morriss2010-05-271-5/+13
| | | | | | Wireshark man page. svn path=/trunk/; revision=33000
* Document the maximum number of files in a ring buffer, including a warning ↵Jeff Morriss2010-05-273-37/+62
| | | | | | about using large numbers of files. svn path=/trunk/; revision=32999
* Put in a warning about the <stdarg.h> problem that I just found andGuy Harris2010-05-261-0/+20
| | | | | | fixed in one place (and am now fixing in some other places). svn path=/trunk/; revision=32962
* Add a -q flag to dumpcap, to squelch its reporting of the packet count,Guy Harris2010-05-261-0/+12
| | | | | | | and add support for SIGINFO, so, if your OS supports SIGINFO, you can get the packet count by typing ^T. svn path=/trunk/; revision=32958
* Minor rewording; Also: add note to not use "" for a hf[] array blurb.Bill Meier2010-05-251-5/+5
| | | | svn path=/trunk/; revision=32940
* Refer to the endianness arguments as "encoding" rather thanGuy Harris2010-05-241-3/+3
| | | | | | | | | | "representation" - we already use "representation" to refer to the text representation of fields. Change some routines with an endianness argument to make it a representation argument instead; svn path=/trunk/; revision=32929
* Use the new REP_ values for proto_tree_add_item().Guy Harris2010-05-241-9/+17
| | | | svn path=/trunk/; revision=32925
* Describe values_string_ext.Anders Broman2010-05-231-0/+17
| | | | svn path=/trunk/; revision=32916
* Don't have -M affect -v yet; if we end up, for example, having dumpcapGuy Harris2010-05-191-9/+3
| | | | | | | | | | | | being the only program that needs to be linked with *pcap, that's when we'd want to fetch that information, but there might be other libraries (e.g., the POSIX capabilities library) that it might be linked with but that programs that use it aren't linked with. Don't commit to the output formats of -M, as they are, as noted, subject to change from release to release. svn path=/trunk/; revision=32904
* Don't write the SP_SUCCESS messages unless -Z was specified.Guy Harris2010-05-181-2/+11
| | | | | | | | | | | | | Add support for a machine-readable "-v" output, which prints only the pcap version string. Give a little more information about the machine-readable format, but note that it's primarily intended for consumption by Wireshark and TShark and is subject to change. Properly hyphenate "pcap-ng". svn path=/trunk/; revision=32851
* Use find_or_create_conversation() in the exampleJeff Morriss2010-05-131-31/+19
| | | | svn path=/trunk/; revision=32793
* Document find_or_create_conversation()Jeff Morriss2010-05-131-15/+26
| | | | svn path=/trunk/; revision=32792
* Update display filter scripts with new field types.Jaap Keuter2010-05-111-4/+10
| | | | svn path=/trunk/; revision=32766
* The default capture buffer size is, in fact, *nominally* 1MB; however,Guy Harris2010-05-082-8/+14
| | | | | | | | libpcap/WinPcap and the capture mechanism atop which they run might either silently limit the buffer size to a smaller value or raise it to a higher value - that's the part that's platform-dependent. svn path=/trunk/; revision=32718
* -B is no longer Windows-only.Guy Harris2010-05-072-10/+20
| | | | svn path=/trunk/; revision=32707
* Add monitor mode support to TShark.Guy Harris2010-05-071-0/+13
| | | | svn path=/trunk/; revision=32704
* Beginnings of monitor mode support with libpcap 1.x.Guy Harris2010-05-071-0/+13
| | | | svn path=/trunk/; revision=32702
* Update capinfos man page.Bill Meier2010-05-031-0/+7
| | | | svn path=/trunk/; revision=32653
* Change two instances of "an Wireshark plugin" to "a Wireshark plugin".Stephen Fisher2010-05-021-2/+2
| | | | | | | | The use of "an" must have been leftover from the Ethereal days ("an Ethereal plugin"). svn path=/trunk/; revision=32639
* Change copyright date in sample dissector code to 201x from 200x for theStephen Fisher2010-04-251-1/+1
| | | | | | | new decade. svn path=/trunk/; revision=32553
* 64-bit integers take the same FIELDDISPLAY as shorter integersJeff Morriss2010-04-241-22/+22
| | | | svn path=/trunk/; revision=32551
* Simplify Makefile.nmake so that adding a new plugin to Makefile.nmakeBill Meier2010-04-191-14/+3
| | | | | | requires only adding the plugin (directory) name to a list of plugins. svn path=/trunk/; revision=32516
* (Trivial changes)Bill Meier2010-04-161-14/+17
| | | | svn path=/trunk/; revision=32497
* Updates:Bill Meier2010-04-161-4/+16
| | | | | | | | 1. Include stdio.h, stdlib.h and string.h only if needed; 2. Add dissector source filename to epan/CMakeLists.txt as well as epan/Makefile.common. svn path=/trunk/; revision=32495
generated by cgit v1.2.3 (git 2.25.1) at 2025-02-24 16:36:50 +0000