Wireshark-dev: Re: [Wireshark-dev] Add restrictions to arguments of dumpcap

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 7 May 2009 13:35:48 -0700

On May 7, 2009, at 12:26 PM, Michael Tüxen wrote:

dumpcap -n -i dag0:2,'sctp && host 1.2.3.4' -i en0

But we also have -y and -s... So taking this path requires something
like
-i interface_name,capture_filer,link_type,snap_length
How does this look like?

It looks like

dumpcap -n -i dag0:2,filter='sctp && host 1.2.3.4',snaplen=128,linktype=DOCSIS

as neither the filter nor the snapshot length nor the link-layer header type are required, so you'd either have to support empty arguments or support tagged arguments.