Wireshark mailing list archives
Re: [Wireshark-commits] rev 37802: /trunk/ /trunk/: capture.c dumpcap.c tshark.c
From: Michael Tüxen <Michael.Tuexen () lurchi franken de>
Date: Mon, 27 Jun 2011 19:31:32 +0200
On Jun 27, 2011, at 6:28 PM, Guy Harris wrote:
On Jun 27, 2011, at 4:30 AM, tuexen () wireshark org wrote:http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=37802 User: tuexen Date: 2011/06/27 04:30 AM Log: Improve the report of illegal capture filters. Also show the interface description.That fixed $ ./tshark -i en1 -f fribbbbbit Capturing on en1 tshark: Invalid capture filter "fribbbbbit" for interface en1! but $ ./tshark -i en1 fribbbbbit Capturing on en1 tshark: Invalid capture filter "(null)" for interface en1! is still broken.
Right. I need to fix this. I'm not sure what the semantic of the final capture filter should be... Should it be a default which is used when no other capture filter is specified? Or should it be the filter which is used for every interface? Currently I'm using the default semantic, but it is not clear that this is the way to go. What do you think? Best regards Michael
(And, yes, that syntax *is* supposed to work: $ nroff -man doc/tshark.1 | more ... SYNOPSIS tshark [ −a <capture autostop condition> ] ... [ −b <capture ring buffer option>] ... [ −B <capture buffer size> ] ... [ −X <eXtension option>] [ −y <capture link type> ] [ −z <statistics> ] [ <capture filter> ] as it works in tcpdump and snoop.) ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Re: [Wireshark-commits] rev 37802: /trunk/ /trunk/: capture.c dumpcap.c tshark.c Guy Harris (Jun 27)
- Re: [Wireshark-commits] rev 37802: /trunk/ /trunk/: capture.c dumpcap.c tshark.c Michael Tüxen (Jun 27)
- Re: [Wireshark-commits] rev 37802: /trunk/ /trunk/: capture.c dumpcap.c tshark.c Michael Tüxen (Jun 27)
- Re: [Wireshark-commits] rev 37802: /trunk/ /trunk/: capture.c dumpcap.c tshark.c Guy Harris (Jun 27)
- Re: [Wireshark-commits] rev 37802: /trunk/ /trunk/: capture.c dumpcap.c tshark.c Michael Tüxen (Jun 27)
- Re: [Wireshark-commits] rev 37802: /trunk/ /trunk/: capture.c dumpcap.c tshark.c Joerg Mayer (Jun 28)
- Re: [Wireshark-commits] rev 37802: /trunk/ /trunk/: capture.c dumpcap.c tshark.c Michael Tüxen (Jun 28)
- Re: [Wireshark-commits] rev 37802: /trunk/ /trunk/: capture.c dumpcap.c tshark.c Michael Tüxen (Jun 28)
- Re: [Wireshark-commits] rev 37802: /trunk/ /trunk/: capture.c dumpcap.c tshark.c Guy Harris (Jun 27)