summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorGerald Combs <gerald@wireshark.org>2008-12-18 23:25:50 +0000
committerGerald Combs <gerald@wireshark.org>2008-12-18 23:25:50 +0000
commit37c36dba55ab59b1ae6c1ceb3c564de2d6b745b3 (patch)
tree2dd553c928da861dcb123c5ab5b1ed03ed520e4d /doc
parent15274ad66410f6c5566da685234da70565803e0e (diff)
downloadwireshark-37c36dba55ab59b1ae6c1ceb3c564de2d6b745b3.tar.gz
Describe the "-d" option a little more clearly.
svn path=/trunk/; revision=27055
Diffstat (limited to 'doc')
-rw-r--r--doc/tshark.pod15
1 files changed, 12 insertions, 3 deletions
diff --git a/doc/tshark.pod b/doc/tshark.pod
index 38db46115f..b69cfbae8b 100644
--- a/doc/tshark.pod
+++ b/doc/tshark.pod
@@ -192,13 +192,22 @@ Run with the given configuration profile.
=item -d E<lt>layer typeE<gt>==E<lt>selectorE<gt>,E<lt>decode-as protocolE<gt>
-Specify that if the layer type in question (for example, B<tcp.port> or
-B<udp.port> for a TCP or UDP port number) has the specified selector
-value, packets should be dissected as the specified protocol.
+Like Wireshark's B<Decode As...> feature, this lets you specify how a
+layer type should be dissected. If the layer type in question (for example,
+B<tcp.port> or B<udp.port> for a TCP or UDP port number) has the specified
+selector value, packets should be dissected as the specified protocol.
Example: B<-d tcp.port==8888,http> will decode any traffic running over
TCP port 8888 as HTTP.
+Using an invalid selector or protocol will print out a list of valid selectors
+and protocol names, respectively.
+
+Example: B<-d .> is a quick way to get a list of valid selectors.
+
+Example: B<-d ethertype==0x0800.> is a quick way to get a list of protocols that can be
+selected with an ethertype.
+
=item -D
Print a list of the interfaces on which B<TShark> can capture, and