diff options
| author | Hessam Jalali <hessam.jalali@gmail.com> | 2017-04-24 17:31:00 +0430 |
|---|---|---|
| committer | Michael Mann <mmann78@netscape.net> | 2017-05-05 00:51:58 +0000 |
| commit | dd884611ac69f1c671bf11a8c57267dd629fd803 (patch) | |
| tree | 6894b418f60171305655592a0822bd002d90f1b1 /doc | |
| parent | 8e52cfb891aa5de7b20f5dbd8471609e6c6ca40d (diff) | |
| download | wireshark-dd884611ac69f1c671bf11a8c57267dd629fd803.tar.gz | |
Auto reset epan session
Automatically resets intarnal epan session after reaching to
specified number of packets, for example
-M 1000
will reset the session every 1000 packets.
this is more like a proposal since the usage is very specific
it is useful for 24/7 live capture with dissection and sending
data directly to another application.
example:
tshark -Y "gtp" -M 100000 -T fields -e gtp.message -e gtp.teid
Change-Id: I8ee8b0380017c684120a93cb3fb43f41615a9c04
Reviewed-on: https://code.wireshark.org/review/21312
Reviewed-by: Evan Huus <eapache@gmail.com>
Petri-Dish: Evan Huus <eapache@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/tshark.pod | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/doc/tshark.pod b/doc/tshark.pod index 100049609d..e6034f64ac 100644 --- a/doc/tshark.pod +++ b/doc/tshark.pod @@ -51,6 +51,7 @@ S<[ B<-x> ]> S<[ B<-X> E<lt>eXtension optionE<gt>]> S<[ B<-y> E<lt>capture link typeE<gt> ]> S<[ B<-Y> E<lt>displaY filterE<gt> ]> +S<[ B<-M> E<lt>auto session resetE<gt> ]> S<[ B<-z> E<lt>statisticsE<gt> ]> S<[ B<--capture-comment> E<lt>commentE<gt> ]> S<[ B<--export-objects> E<lt>protocolE<gt>,E<lt>destdirE<gt> ]> @@ -904,6 +905,17 @@ Use this instead of -R for filtering using single-pass analysis. If doing two-pass analysis (see -2) then only packets matching the read filter (if there is one) will be checked against this filter. +=item -M E<lt>auto session resetE<gt> + +Automatically reset internal session when reached to specified number of packets. +for example, + + -M 100000 + +will reset session every 100000 packets. + +This feature does not support -2 two-pass analysis + =item -z E<lt>statisticsE<gt> Get B<TShark> to collect various types of statistics and display the result |