diff options
author | Sake Blok <sake@euronet.nl> | 2017-06-27 22:04:33 +0200 |
---|---|---|
committer | Sake Blok <sake.blok@SYN-bit.nl> | 2017-07-03 16:41:37 +0000 |
commit | 3803e00367413260cbb543c3c4ed13ae2d8fd194 (patch) | |
tree | e96b7c81846caec9343201ea80e8afeee68dc80c /doc | |
parent | 2c58ed569ed0c096d5640fd0da5825bcfef04aeb (diff) | |
download | wireshark-3803e00367413260cbb543c3c4ed13ae2d8fd194.tar.gz |
Add the "interval" option to "-b". Each new capture starts at the
exact start of a time interval. For instance, using -b interval:3600
will start a new capture file at each whole hour.
Changed the duration option in the GUI interfaces to use the new
interval option.
Change-Id: I0180c43843f5d2f0c2f50153c9ce42ac7fa5aeae
Reviewed-on: https://code.wireshark.org/review/22428
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Sake Blok <sake.blok@SYN-bit.nl>
Diffstat (limited to 'doc')
-rw-r--r-- | doc/dumpcap.pod | 11 | ||||
-rw-r--r-- | doc/tshark.pod | 11 | ||||
-rw-r--r-- | doc/wireshark.pod.template | 11 |
3 files changed, 21 insertions, 12 deletions
diff --git a/doc/dumpcap.pod b/doc/dumpcap.pod index 5753f99075..1c76aa8fc2 100644 --- a/doc/dumpcap.pod +++ b/doc/dumpcap.pod @@ -98,6 +98,9 @@ where I<key> is one of: B<duration>:I<value> switch to the next file after I<value> seconds have elapsed, even if the current file is not completely filled up. +B<interval>:I<value> switch to the next file when the time is an exact +multiple of I<value> seconds + B<filesize>:I<value> switch to the next file after it reaches a size of I<value> kB. Note that the filesize is limited to a maximum value of 2 GiB. @@ -105,10 +108,10 @@ B<files>:I<value> begin again with the first file after I<value> number of files were written (form a ring buffer). This value must be less than 100000. Caution should be used when using large numbers of files: some filesystems do not handle many files in a single directory well. The B<files> criterion -requires either B<duration> or B<filesize> to be specified to control when to -go to the next file. It should be noted that each B<-b> parameter takes exactly -one criterion; to specify two criterion, each must be preceded by the B<-b> -option. +requires either B<duration>, B<interval> or B<filesize> to be specified to +control when to go to the next file. It should be noted that each B<-b> +parameter takes exactly one criterion; to specify two criterion, each must be +preceded by the B<-b> option. Example: B<-b filesize:1000 -b files:5> results in a ring buffer of five files of size one megabyte each. diff --git a/doc/tshark.pod b/doc/tshark.pod index 9cde4e4fea..664851bafe 100644 --- a/doc/tshark.pod +++ b/doc/tshark.pod @@ -209,6 +209,9 @@ where I<key> is one of: B<duration>:I<value> switch to the next file after I<value> seconds have elapsed, even if the current file is not completely filled up. +B<interval>:I<value> switch to the next file when the time is an exact +multiple of I<value> seconds + B<filesize>:I<value> switch to the next file after it reaches a size of I<value> kB. Note that the filesize is limited to a maximum value of 2 GiB. @@ -216,10 +219,10 @@ B<files>:I<value> begin again with the first file after I<value> number of files were written (form a ring buffer). This value must be less than 100000. Caution should be used when using large numbers of files: some filesystems do not handle many files in a single directory well. The B<files> criterion -requires either B<duration> or B<filesize> to be specified to control when to -go to the next file. It should be noted that each B<-b> parameter takes exactly -one criterion; to specify two criterion, each must be preceded by the B<-b> -option. +requires either B<duration>, B<interval> or B<filesize> to be specified to +control when to go to the next file. It should be noted that each B<-b> +parameter takes exactly one criterion; to specify two criterion, each must be +preceded by the B<-b> option. Example: B<-b filesize:1000 -b files:5> results in a ring buffer of five files of size one megabyte each. diff --git a/doc/wireshark.pod.template b/doc/wireshark.pod.template index 1213c290bc..d89bf546fc 100644 --- a/doc/wireshark.pod.template +++ b/doc/wireshark.pod.template @@ -272,6 +272,9 @@ where I<key> is one of: B<duration>:I<value> switch to the next file after I<value> seconds have elapsed, even if the current file is not completely filled up. +B<interval>:I<value> switch to the next file when the time is an exact +multiple of I<value> seconds + B<filesize>:I<value> switch to the next file after it reaches a size of I<value> kB. Note that the filesize is limited to a maximum value of 2 GiB. @@ -279,10 +282,10 @@ B<files>:I<value> begin again with the first file after I<value> number of files were written (form a ring buffer). This value must be less than 100000. Caution should be used when using large numbers of files: some filesystems do not handle many files in a single directory well. The B<files> criterion -requires either B<duration> or B<filesize> to be specified to control when to -go to the next file. It should be noted that each B<-b> parameter takes exactly -one criterion; to specify two criterion, each must be preceded by the B<-b> -option. +requires either B<duration>, B<interval> or B<filesize> to be specified to +control when to go to the next file. It should be noted that each B<-b> +parameter takes exactly one criterion; to specify two criterion, each must be +preceded by the B<-b> option. Example: B<-b filesize:1000 -b files:5> results in a ring buffer of five files of size one megabyte each. |