Wireshark-dev: Re: [Wireshark-dev] Add restrictions to arguments of dumpcap
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 7 May 2009 13:35:48 -0700

On May 7, 2009, at 12:26 PM, Michael Tüxen wrote:


dumpcap -n -i dag0:2,'sctp && host 1.2.3.4' -i en0


But we also have -y and -s... So taking this path requires something
like
-i interface_name,capture_filer,link_type,snap_length
How does this look like?


It looks like
dumpcap -n -i dag0:2,filter='sctp && host 1.2.3.4',snaplen=128,linktype=DOCSIS
as neither the filter nor the snapshot length nor the link-layer header type are required, so you'd either have to support empty arguments or support tagged arguments.