From 5ef0280a627d711ecdf39f856ecdd8800ea5e471 Mon Sep 17 00:00:00 2001 From: Ulf Lamping Date: Sat, 26 Aug 2006 11:03:41 +0000 Subject: rework the pop-up menu section svn path=/trunk/; revision=19043 --- docbook/wsug_src/WSUG_chapter_work.xml | 623 ++++++++++++++------------------- 1 file changed, 268 insertions(+), 355 deletions(-) (limited to 'docbook/wsug_src/WSUG_chapter_work.xml') diff --git a/docbook/wsug_src/WSUG_chapter_work.xml b/docbook/wsug_src/WSUG_chapter_work.xml index e610b125a5..c71025e70a 100644 --- a/docbook/wsug_src/WSUG_chapter_work.xml +++ b/docbook/wsug_src/WSUG_chapter_work.xml @@ -4,7 +4,8 @@ Working with captured packets -
Viewing packets you have captured +
+ Viewing packets you have captured Once you have captured some packets, or you have opened a previously saved capture file, you can view the packets that are displayed in @@ -47,509 +48,421 @@
Pop-up menus You can bring up a pop-up menu over either the "Packet List", - "Packet Details" or "Packet Bytes" pane by clicking your right mouse button. - + "Packet Details" or "Packet Bytes" pane by clicking your right + mouse button at the corresponding pane. + +
+ Pop-up menu of the "Packet List" pane + +
+ Pop-up menu of the "Packet List" pane + +
+ The following table gives an overview which functions are available - in the panes, where to find the corresponding function in the menu, and - a short description of each item. + in this pane, where to find the corresponding function in the main menu, + and a short description of each item. - - Function overview of the pop-up menus - +
+ The menu items of the "Packet List" pop-up menu + - - - - + Item - List - Details - Bytes - Menu + Identical to main menu's item: Description Mark Packet (toggle) - X - - - - Edit - Mark/unmark a packet. + + Mark/unmark a packet. + Set Time Reference (toggle) - X - - - - Edit - Set/reset a time reference. - - - - Expand Subtrees - - - X - - - View - - Expand the currently selected subtree. - - - - - Expand All - - - X - - - View - - Expand all subtrees in all packets in the capture. - + + Set/reset a time reference. + - Collapse All - - - X - - - View - - - Wireshark keeps a list of all the protocol subtrees that are - expanded, and uses it to ensure that the correct subtrees - are expanded when you display a packet. This menu item - collapses the tree view of all packets in the capture list. - - + ----- + + Apply as Filter - X - X - - Analyze - . + + Prepare and apply a display filter based on the currently selected + item. + Prepare a Filter - X - X - - Analyze - . + + Prepare a display filter based on the currently selected item. + - Follow TCP stream - X - X + Conversation Filter - - Analyze - View all the data on a TCP stream between a pair of nodes. + + This menu item applies a display filter with the address information + from the selected packet. E.g. the IP menu entry will set a filter + to show the traffic between the two IP addresses of the current + packet. + XXX - add a new section describing this better. + - Wiki Protocol Page - - - X - - + SCTP - - Show the wiki page corresponding to the currently selected protocol in your web browser. - + + XXX - add an explanation of this. + - Filter Field Reference - - - X - - - - + Follow TCP Stream + Analyze - Show the filter field reference web page corresponding to the currently selected protocol in your web browser. - + + Allows you to view all the data on a TCP + stream between a pair of nodes. + - Protocol Preferences... - - - X - - - - + Follow SSL Stream + Analyze - The menu item takes you to the preferences dialog and selects - the page corresponding to the protocol if there are settings - associated with the highlighted field. More information on preferences - can be found in . - + + Same as "Follow TCP Stream" but for SSL. + XXX - add a new section describing this better. + + + ----- + + + Decode As... - X - X - - Analyze - . + + Change or apply a new relation between two dissectors. + - - - Print... - X - - - - File - Print (the selected) packet(s). + + Print packets. + Show Packet in New Window - X - - - - View - Display the selected packet in another window. + + Display the selected packet in a new window. + + + +
+
+ +
+ Pop-up menu of the "Packet Details" pane + +
+ Pop-up menu of the "Packet Details" pane + +
+ + + The following table gives an overview which functions are available + in this pane, where to find the corresponding function in the main menu, + and a short description of each item. + + + The menu items of the "Packet Details" pop-up menu + + + + - Resolve name - - - X - - - View/Name Resolution - - Cause a name resolution to be performed for the selected packet, - but NOT for every packet in the capture. - + Item + Identical to main menu's item: + Description + + - Go to Corresponding Packet - - - X + Copy - - Go - If the selected field has a packet number in it, go to it. The - corresponding packet will often be a response which is requested by - this packet, or the request for which this packet is a response. - + + Copy the displayed text of the selected field to the system + clipboard. + - Copy - - - - - X - - - - Copy the selected packet data to the clipboard (XXX - in which format). - - + ----- + + - Export Selected Packet Bytes... - - - - - X - File->Export + Expand Subtrees + View - Export raw packet bytes to a binary file. - - - - -
- -
Pop-up menu of "Packet List" pane - -
- Pop-up menu of "Packet List" pane - -
- - Mark Packet (toggle) - - - This menu item is the same as the Edit menu item of the same - name. It allows you to mark/unmark a packet. - - - - Set Time Reference (toggle) - - - This menu item is the same as the Edit menu items of the same - name. It allows you to set/reset a time references. - - - - Apply as Filter - - - This menu item is the same as the Analyze menu items of the same - name. - - - - Prepare a Filter - - - This menu item is the same as the Analyze menu items of the same - name. - - - - Conversation Filter - - - This menu item applies a display filter with the address information - from the selected packet. E.g. the IP menu entry will set a filter - between the two IP addresses of the current packet. - XXX - add a new section describing this better. - - - - SCTP - - - XXX - add an explanation of this. - - - - Follow TCP Stream - - - This menu item is the same as the Analyze menu item of - the same name. It allows you to view all the data on a TCP - stream between a pair of nodes. - - - - Follow SSL Stream - - - Same as "Follow TCP Stream" but for SSL. - XXX - add a new section describing this better. - - - - Decode As... - - This menu item is the same as the Analyze menu item of the - same name. + Expand the currently selected subtree. - - - Print... - - - This menu item is the same as the File menu item of the same - name. It allows you to print packets. - - - - - Show Packet in New Window - - - This menu item is the same as the View menu item of the - same name. It allows you to display the selected packet in - another window. - - - - - -
- -
Pop-up menu of "Packet Details" pane - -
- Pop-up menu of "Packet Details" pane - -
- - Copy - - - Copy the text of the selected field to the system clipboard. - - - - Expand Subtrees - - - This menu item expands the currently selected subtree. - - - - Expand All - + + + + Expand All + View + - This menu item expands all subtrees in all packets in the - capture. + Expand all subtrees in all packets in the capture. - - - Collapse All - + + + + Collapse All + View + Wireshark keeps a list of all the protocol subtrees that are expanded, and uses it to ensure that the correct subtrees are expanded when you display a packet. This menu item collapses the tree view of all packets in the capture list. - - - Apply as Filter - + + + + ----- + + + + + Apply as Filter + Analyze + - This menu item is the same as the Analyze menu items of the same + Prepare and apply a display filter based on the currently + selected item. name. - - - Prepare a Filter - + + + + Prepare a Filter + Analyze + - This menu item is the same as the Analyze menu items of the same - name. + Prepare a display filter based on the currently selected item. - - - Follow TCP Stream - + + + + Follow TCP Stream + Analyze + - This menu item is the same as the Analyze menu item of the - same name. It allows you to view all the data on a TCP stream - between a pair of nodes. - - - - Follow SSL Stream - + Allows you to view all the data on a TCP stream between a pair + of nodes. + + + + + Follow SSL Stream + Analyze + Same as "Follow TCP Stream" but for SSL. XXX - add a new section describing this better. - - - Wiki Protocol Page - + + + + ----- + + + + + Wiki Protocol Page + - + Show the wiki page corresponding to the currently selected protocol in your web browser. - - - Filter Field Reference - + + + + Filter Field Reference + - + Show the filter field reference web page corresponding to the currently selected protocol in your web browser. - - - - Protocol Properties... - + + + + + Protocol Properties... + - + The menu item takes you to the properties dialog and selects the page corresponding to the protocol if there are properties associated with the highlighted field. More information on preferences can be found in . - - - - Decode As... - + + + + + ----- + + + + + Decode As... + Analyze + - This menu item is the same as the Analyze menu item of the - same name. + Change or apply a new relation between two dissectors. - - - Resolve Name - + + + + Resolve Name + View + - This menu item causes name resolution to be performed for + Causes a name resolution to be performed for the selected packet, but NOT every packet in the capture. - - - Go to Corresponding Packet - + + + + Go to Corresponding Packet + Go + If the selected field has a corresponding packet, go to it. Corresponding packets will usually be a request/response packet pair or such. - - - - + + + + +
-
Pop-up menu of "Packet Bytes" pane +
+ Pop-up menu of the "Packet Bytes" pane
- Pop-up menu of "Packet Bytes" pane + Pop-up menu of the "Packet Bytes" pane
- - Copy/All Information - + + + The following table gives an overview which functions are available + in this pane, where to find the corresponding function in the main menu, + and a short description of each item. + + + The menu items of the "Packet Bytes" pop-up menu + + + + + + Item + Identical to main menu's item: + Description + + + + + Copy/All Information + - + - Copy the selected (XXX - all?) packet data to the clipboard (XXX - in which format). + Copy the selected (XXX - all?) packet data to the clipboard + (XXX - in which format). - - - Copy/Text Only - + + + + Copy/Text Only + - + - Copy the selected packet data to the clipboard (XXX - in which format). + Copy the selected packet data to the clipboard + (XXX - in which format). - - - Export Selected Packet Bytes... - + + + + Export Selected Packet Bytes... + File + This menu item is the same as the File menu item of the same name. It allows you to export raw packet bytes to a binary file. - - - - + + + + +
-
Filtering packets while viewing +
+ Filtering packets while viewing Wireshark has two filtering languages: One used when capturing packets, and one used when displaying packets. In this section we explore that second type of filter: Display filters. The first one - has already been dealt with in . + has already been dealt with in + . Display filters allow you to concentrate on the packets you are -- cgit v1.2.1