Wireshark - 1.0 Betriebsanweisung PDF herunterladen (Seite 182)

supplied to the -i flag to specify an interface on which to cap-

ture.

This can be useful on systems that don't have a command to

list them (e.g., Windows systems, or UNIX systems lacking

ifconfig -a); the number can be useful on Windows 2000 and

later systems, where the interface name is a somewhat com-

plex string.

Note that "can capture" means that Wireshark was able to

open that device to do a live capture; if, on your system, a

program doing a network capture must be run from an ac-

count with special privileges (for example, as root), then, if

Wireshark is run with the -D flag and is not run from such an

account, it will not list any interfaces.

-f <capture filter> This option sets the initial capture filter expression to be used

when capturing packets.

-g <packet number> After reading in a capture file using the -r flag, go to the giv-

en packet number.

-h The -h option requests Wireshark to print its version and us-

age instructions (as shown above) and exit.

-i <capture interface> Set the name of the network interface or pipe to use for live

packet capture.

Network interface names should match one of the names lis-

ted in wireshark -D (described above); a number, as reported

by wireshark -D, can also be used. If you're using UNIX,

netstat -i or ifconfig -a might also work to list interface

names, although not all versions of UNIX support the -a flag

to ifconfig.

If no interface is specified, Wireshark searches the list of in-

terfaces, choosing the first non-loopback interface if there are

any non-loopback interfaces, and choosing the first loopback

interface if there are no non-loopback interfaces; if there are

no interfaces, Wireshark reports an error and doesn't start the

capture.

Pipe names should be either the name of a FIFO (named pipe)

or ``-'' to read data from the standard input. Data read from

pipes must be in standard libpcap format.

-k The -k option specifies that Wireshark should start capturing

packets immediately. This option requires the use of the -i

parameter to specify the interface that packet capture will oc-

cur from.

-l This option turns on automatic scrolling if the packet list pane

is being updated automatically as packets arrive during a cap-

ture ( as specified by the -S flag).

-L List the data link types supported by the interface and exit.

-m <font> This option sets the name of the font used for most text dis-

played by Wireshark. XXX - add an example!

-n Disable network object name resolution (such as hostname,

TCP and UDP port names).

Customizing Wireshark

167

1 2 ... 177 178 179 180 181 182 183 184 185 186 187 ... 283 284

Kommentare zu diesen Handbüchern

Keine Kommentare

Wireshark - 1.0 Betriebsanweisung Seite 182

Kommentare zu diesen Handbüchern