Wireshark-bugs: [Wireshark-bugs] [Bug 5342] Request for separator option in tshark output
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5342
--- Comment #6 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2011-09-24 10:32:34 PDT ---
(In reply to comment #5)
> Created an attachment (id=7079)
--> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7079) [details]
> (new) -P (partition char) option to TShark
>
> Updated patch from v1.2 to trunk.
>
> Went with the suggested -P option and moved current -P option to -2
>
> Updated doc/tshark.pod and docbook/WSUG_app_tools.xml, but didn't see where to
> update docbook/release_notes.xml.
Hmm, currently the 2 options for -S and -P mean the following:
-S is documented as "Show packets in real time" in tshark.c, but that really
doesn't make much sense for tshark. However, "tshark -h" indicates that this
option will, "display packets even when writing to a file". Looking at
tshark.c again, this makes more sense since the option merely sets the
print_packet_info flag to TRUE.
-P means, "perform a two pass analysis"
So ... here's what I think we should do:
1) Move the currently undocumented "-P" option to "-2" for "*2*-pass analysis".
2) Move the current "-S" option to "-P" for "*P*rint packet info".
3) Use the newly opened up "-S" option for this new option for "Separator"
I can make the necessary code/documentation changes for this, but I would like
to get some feedback about this proposal before I do. Reassigning options
obviously breaks backward compatibility and may cause confusion, but I think
these assignments make a lot more sense. Thoughts?
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.