Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 5342] Request for separator option in tshark output

Date: Sat, 24 Sep 2011 10:32:35 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5342

--- Comment #6 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2011-09-24 10:32:34 PDT ---
(In reply to comment #5)
> Created an attachment (id=7079)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7079) [details]
> (new) -P (partition char) option to TShark
> 
> Updated patch from v1.2 to trunk.
> 
> Went with the suggested -P option and moved current -P option to -2
> 
> Updated doc/tshark.pod and docbook/WSUG_app_tools.xml, but didn't see where to
> update docbook/release_notes.xml.

Hmm, currently the 2 options for -S and -P mean the following:
-S is documented as "Show packets in real time" in tshark.c, but that really
doesn't make much sense for tshark.  However, "tshark -h" indicates that this
option will, "display packets even when writing to a file".  Looking at
tshark.c again, this makes more sense since the option merely sets the
print_packet_info flag to TRUE.

-P means, "perform a two pass analysis"

So ... here's what I think we should do:
1) Move the currently undocumented "-P" option to "-2" for "*2*-pass analysis".
2) Move the current "-S" option to "-P" for "*P*rint packet info".
3) Use the newly opened up "-S" option for this new option for "Separator"

I can make the necessary code/documentation changes for this, but I would like
to get some feedback about this proposal before I do.  Reassigning options
obviously breaks backward compatibility and may cause confusion, but I think
these assignments make a lot more sense.  Thoughts?

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.