Wireshark - 1.0 Betriebsanweisung PDF herunterladen (Seite 183)

-N <name resolving flags> Turns on name resolving for particular types of addresses and

port numbers; the argument is a string that may contain the

letters m to enable MAC address resolution, n to enable net-

work address resolution, and t to enable transport-layer port

number resolution. This overrides -n if both -N and -n are

present. The letter C enables concurrent (asynchronous) DNS

lookups.

-o <preference/recent settings> Sets a preference or recent value, overriding the default value

and any value read from a preference/recent file. The argu-

ment to the flag is a string of the form prefname:value, where

prefname is the name of the preference (which is the same

name that would appear in the preference/recent file), and

value is the value to which it should be set. Multiple instances

of -o <preference settings> can be given on a single com-

mand line.

An example of setting a single preference would be:

wireshark -o mgcp.display_dissect_tree:TRUE

An example of setting multiple preferences would be:

wireshark -o mgcp.display_dissect_tree:TRUE -o

mgcp.udp.callagent_port:2627

Tip!

You can get a list of all available preference

strings from the preferences file, see Ap-

pendix A, Files and Folders.

User access tables can be overridden using "uat," followed by

the UAT file name and a valid record for the file:

wireshark -o "uat:user_dlts:\"User 0

(DLT=147)\",\"http\",\"0\",\"\",\"0\",\"\""

The example above would dissect packets with a libpcap data

link type 147 as HTTP, just as if you had configured it in the

DLT_USER protocol preferences.

-p Don't put the interface into promiscuous mode. Note that the

interface might be in promiscuous mode for some other reas-

on; hence, -p cannot be used to ensure that the only traffic

that is captured is traffic sent to or from the machine on

which Wireshark is running, broadcast traffic, and multicast

traffic to addresses received by that machine.

-P <path setting> Special path settings usually detected automatically. This is

used for special cases, e.g. starting Wireshark from a known

location on an USB stick.

The criterion is of the form key:path, where key is one of:

persconf:path path of personal configuration files, like

the preferences files.

persdata:path path of personal data files, it's the folder

initially opened. After the initialization,

the recent file will keep the folder last

used.

Customizing Wireshark

168

1 2 ... 178 179 180 181 182 183 184 185 186 187 188 ... 283 284

Kommentare zu diesen Handbüchern

Keine Kommentare

Wireshark - 1.0 Betriebsanweisung Seite 183

Kommentare zu diesen Handbüchern