Wireshark - 1.0 Betriebsanweisung PDF herunterladen (Seite 184)

-Q This option forces Wireshark to exit when capturing is com-

plete. It can be used with the -c option. It must be used in

conjunction with the -i and -w options.

-r <infile> This option provides the name of a capture file for Wireshark

to read and display. This capture file can be in one of the

formats Wireshark understands.

-R <read (display) filter> This option specifies a display filter to be applied when read-

ing packets from a capture file. The syntax of this filter is that

of the display filters discussed in Section 6.3, “Filtering pack-

ets while viewing”. Packets not matching the filter are dis-

carded.

-s <capture snaplen> This option specifies the snapshot length to use when captur-

ing packets. Wireshark will only capture <snaplen> bytes of

data for each packet.

-S This option specifies that Wireshark will display packets as it

captures them. This is done by capturing in one process and

displaying them in a separate process. This is the same as "Up-

date list of packets in real time" in the Capture Options dialog

box.

-t <time stamp format> This option sets the format of packet timestamps that are dis-

played in the packet list window. The format can be one of:

• r relative, which specifies timestamps are displayed relat-

ive to the first packet captured.

• a absolute, which specifies that actual times be displayed

for all packets.

• ad absolute with date, which specifies that actual dates

and times be displayed for all packets.

• d delta, which specifies that timestamps are relative to the

previous packet.

• e epoch, which specifies that timestamps are seconds

since epoch (Jan 1, 1970 00:00:00)

-v The -v option requests Wireshark to print out its version in-

formation and exit.

-w <savefile> This option sets the name of the savefile to be used when sav-

ing a capture file.

-y <capture link type> If a capture is started from the command line with -k, set the

data link type to use while capturing packets. The values re-

ported by -L are the values that can be used.

-X <eXtension option> Specify an option to be passed to a TShark module. The eX-

tension option is in the form extension_key:value, where ex-

tension_key can be:

lua_script:lua_script_filename; Tells Wireshark to load the

given script in addition to the default Lua scripts.

-z <statistics-string> Get Wireshark to collect various types of statistics and dis-

play the result in a window that updates in semi-real time.

XXX - add more details here!

Customizing Wireshark

169

1 2 ... 179 180 181 182 183 184 185 186 187 188 189 ... 283 284

Kommentare zu diesen Handbüchern

Keine Kommentare

Wireshark - 1.0 Betriebsanweisung Seite 184

Kommentare zu diesen Handbüchern