Customizing Ethereal

 

 

 

 

-m <font>

This option sets the name of the font used for most text dis-

 

played by Ethereal. XXX - add an example!

 

-n

Disable network object name resolution (such as hostname,

 

TCP and UDP port names).

 

-N <name resolving flags>

Turns on name resolving for particular types of addresses and

 

port numbers; the argument is a string that may contain the

 

letters m to enable MAC address resolution, n to enable net-

 

work address resolution, and t to enable transport-layer port

 

number resolution. This overrides -nif both -Nand -nare

 

present. The letter C enables concurrent (asynchronous) DNS

 

lookups.

 

 

 

-o <preference/recent settings>

Sets a preference or recent value, overriding the default value

 

and any value read from a preference/recent file. The argu-

 

ment to the flag is a string of the form prefname:value, where

 

prefname is the name of the preference (which is the same

 

name that would appear in the preference/recent file), and

 

value is the value to which it should be set. Multiple instances

 

of -o <preference settings> can be given on a single com-

 

mand line.

 

 

 

 

An example of setting a single preference would be:

 

 

ethereal -o mgcp.display_dissect_tree:TRUE

 

 

An example of setting multiple preferences would be:

 

 

ethereal

-o

mgcp.display_dissect_tree:TRUE

-o

 

mgcp.udp.callagent_port:2627

 

 

 

Tip!

 

 

 

 

You can get a list of all available preference

 

 

strings from the preferences file, see Ap-

 

 

pendix A, Configuration (and other) Files and

 

 

Folders.

 

-p

Don't put the interface into promiscuous mode. Note that the

 

interface might be in promiscuous mode for some other reas-

 

on; hence, -p cannot be used to ensure that the only traffic

 

that is captured is traffic sent to or from the machine on

 

which Ethereal is running, broadcast traffic, and multicast

 

traffic to addresses received by that machine.

 

-Q

This option forces Ethereal to exit when capturing is com-

 

plete. It can be used with the -coption. It must be used in

 

conjunction with the -iand -woptions.

 

-r <infile>

This option provides the name of a capture file for Ethereal to

 

read and display. This capture file can be in one of the

 

formats Ethereal understands.

 

-R <read (display) filter>

This option specifies a display filter to be applied when read-

 

ing packets from a capture file. The syntax of this filter is that

 

of the display filters discussed in Section 6.2, “Filtering pack-

 

ets while viewing”. Packets not matching the filter are dis-

 

carded.

 

 

 

-s <capture snaplen>

This option specifies the snapshot length to use when captur-

 

ing packets. Ethereal will only capture <snaplen> bytes of

144

Page 158
Image 158
Lucent Technologies Ethereal manual Font, Name resolving flags, Preference/recent settings, Infile, Read display filter