Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: Re: [Wireshark-dev] Add restrictions to arguments of dumpcap

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Sébastien Tandel <sebastien@xxxxxxxxx>
Date: Thu, 7 May 2009 10:10:13 -0300


On Thu, May 7, 2009 at 03:05, Stephen Donnelly <stephen@xxxxxxxxxx> wrote:
Aaron Turner wrote:
> On Wed, May 6, 2009 at 8:59 PM, Michael Tüxen
> <Michael.Tuexen@xxxxxxxxxxxxxxxxx> wrote:
>> On May 6, 2009, at 3:40 PM, Aaron Turner wrote:

> I think this is confusing to many people and is more likely to have
> unintended consequences.   Most users don't consider CLI option
> ordering to have special meaning.  Personally, I prefer Stephen's
> suggestion of directly linking the filter to the interface ala -i
> en0:"sctp && host a.b.c.d" if you want to get fancy.
>
> It also means the old style cli args could easliy be grand-fathered in
> (any interface without a specific filter uses the global filter).

Completely agree to define something which is explicitly linked to which interface the filter belongs. Ordering parameters is not intuitive.


I you do decide to go this way, ':' might not be the best delimiter
character to use. It is already used in libpcap interface names and
could cause parsing headaches.

I think some OSes use ':' in vlan interface names? Also ':' is used in
dag interface names to indicate sub streams, e.g. "dag0:2".

':' is indeed confusing. It is used by Linux to define virtual interfaces like eth0:1


Regards,
Sebastien Tandel
  • Follow-Ups:
    • Re: [Wireshark-dev] Add restrictions to arguments of dumpcap
      • From: Nathan Jennings
  • References:
    • [Wireshark-dev] Add restrictions to arguments of dumpcap
      • From: Michael Tüxen
    • Re: [Wireshark-dev] Add restrictions to arguments of dumpcap
      • From: Aaron Turner
    • Re: [Wireshark-dev] Add restrictions to arguments of dumpcap
      • From: Michael Tüxen
    • Re: [Wireshark-dev] Add restrictions to arguments of dumpcap
      • From: Aaron Turner
    • Re: [Wireshark-dev] Add restrictions to arguments of dumpcap
      • From: Stephen Donnelly
  • Prev by Date: Re: [Wireshark-dev] [Wireshark-commits] rev 28135: /trunk/packaging/macosx/ /trunk/packaging/macosx/: Read_me_first.rtf dmg_background.png dmg_background.svg dmg_set_style.scpt osx-app.sh osx-dmg.sh root.ds_store util_background.png ...
  • Next by Date: Re: [Wireshark-dev] Add restrictions to arguments of dumpcap
  • Previous by thread: Re: [Wireshark-dev] Add restrictions to arguments of dumpcap
  • Next by thread: Re: [Wireshark-dev] Add restrictions to arguments of dumpcap
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation