summaryrefslogtreecommitdiff
path: root/tcpdump.1.in
diff options
context:
space:
mode:
authorGuy Harris <guy@alum.mit.edu>2017-10-11 12:09:42 -0700
committerGuy Harris <guy@alum.mit.edu>2017-10-11 12:09:42 -0700
commit9b845d6549f426b892d61b5d05adb2823ecaf991 (patch)
tree74cb724452d205f59d0ede6272a93d287e0a4c1a /tcpdump.1.in
parenta263db98faf9c21d7939f6a780c3f8ab31f15d67 (diff)
downloadtcpdump-9b845d6549f426b892d61b5d05adb2823ecaf991.tar.gz
Add --print, to cause packet printing even with -w.
While we're at it, clean up some man page issues found in the process of updating the man page to describe --print. Fixes GitHub issue #639.
Diffstat (limited to 'tcpdump.1.in')
-rw-r--r--tcpdump.1.in74
1 files changed, 40 insertions, 34 deletions
diff --git a/tcpdump.1.in b/tcpdump.1.in
index 4711187f..4435c4fa 100644
--- a/tcpdump.1.in
+++ b/tcpdump.1.in
@@ -38,24 +38,32 @@ tcpdump \- dump traffic on a network
.B \-c
.I count
]
-.br
-.ti +8
[
.B \-C
.I file_size
-] [
-.B \-G
-.I rotate_seconds
-] [
+]
+.ti +8
+[
+.B \-E
+.I spi@ipaddr algo:secret,...
+]
+.ti +8
+[
.B \-F
.I file
]
-.br
-.ti +8
+[
+.B \-G
+.I rotate_seconds
+]
[
.B \-i
.I interface
]
+.ti +8
+[
+.B \-\-immediate\-mode
+]
[
.B \-j
.I tstamp_type
@@ -64,16 +72,18 @@ tcpdump \- dump traffic on a network
.B \-m
.I module
]
+.ti +8
[
.B \-M
.I secret
]
-.br
-.ti +8
[
.B \-\-number
]
[
+.B \-\-print
+]
+[
.B \-Q
.I in|out|inout
]
@@ -83,10 +93,6 @@ tcpdump \- dump traffic on a network
.I file
]
[
-.B \-V
-.I file
-]
-[
.B \-s
.I snaplen
]
@@ -95,27 +101,26 @@ tcpdump \- dump traffic on a network
.I type
]
[
+.B \-\-version
+]
+.ti +8
+[
+.B \-V
+.I file
+]
+[
.B \-w
.I file
]
-.br
-.ti +8
[
.B \-W
.I filecount
]
-.br
-.ti +8
-[
-.B \-E
-.I spi@ipaddr algo:secret,...
-]
-.br
-.ti +8
[
.B \-y
.I datalinktype
]
+.ti +8
[
.B \-z
.I postrotate-command
@@ -130,13 +135,6 @@ tcpdump \- dump traffic on a network
]
.ti +8
[
-.B \-\-immediate\-mode
-]
-[
-.B \-\-version
-]
-.ti +8
-[
.I expression
]
.br
@@ -463,12 +461,12 @@ accuracy to a savefile, the time stamps are written with nanosecond
resolution, and the file is written with a different magic number, to
indicate that the time stamps are in seconds and nanoseconds; not all
programs that read pcap savefiles will be able to read those captures.
-.LP
+.IP
When reading a savefile, convert time stamps to the precision specified
by \fItimestamp_precision\fP, and display them with that resolution. If
the precision specified is less than the precision of time stamps in the
file, the conversion will lose precision.
-.LP
+.IP
The supported values for \fItimestamp_precision\fP are \fBmicro\fP for
microsecond resolution and \fBnano\fP for nanosecond resolution. The
default is microsecond resolution.
@@ -579,6 +577,12 @@ Note that the interface might be in promiscuous
mode for some other reason; hence, `-p' cannot be used as an abbreviation for
`ether host {local-hw-addr} or ether broadcast'.
.TP
+.BI \-\-print
+Print parsed packet output, even if the raw packets are being saved to a
+file with the
+.B \-w
+flag.
+.TP
.BI \-Q " direction"
.PD 0
.TP
@@ -690,7 +694,9 @@ Print undecoded NFS handles.
.PD
If the
.B \-w
-option is not specified, make the printed packet output
+option is not specified, or if it is specified but the
+.B \-\-print
+flag is also specified, make the printed packet output
``packet-buffered''; i.e., as the description of the contents of each
packet is printed, it will be written to the standard output, rather
than, when not writing to a terminal, being written only when the output