diff options
| author | guy <guy> | 2008-04-06 17:41:59 +0000 |
|---|---|---|
| committer | guy <guy> | 2008-04-06 17:41:59 +0000 |
| commit | 518ac8598a02a816bf2f3d55b00175a54a40cd1a (patch) | |
| tree | a42737c5471bb3b3f55c6ec94b764e91cd7b350a | |
| parent | 9a9394bfb1b2948f6fb88c4dab8fab95a4f4012d (diff) | |
| download | tcpdump-518ac8598a02a816bf2f3d55b00175a54a40cd1a.tar.gz | |
Document the new -B and -I options, and update the reference to the
libpcap manual to give the section name as 3PCAP.
| -rw-r--r-- | tcpdump.1 | 23 |
1 files changed, 20 insertions, 3 deletions
@@ -1,4 +1,4 @@ -.\" @(#) $Header: /tcpdump/master/tcpdump/Attic/tcpdump.1,v 1.185.2.3 2008-01-07 00:16:39 guy Exp $ (LBL) +.\" @(#) $Header: /tcpdump/master/tcpdump/Attic/tcpdump.1,v 1.185.2.4 2008-04-06 17:41:59 guy Exp $ (LBL) .\" .\" $NetBSD: tcpdump.8,v 1.9 2003/03/31 00:18:17 perry Exp $ .\" @@ -29,7 +29,10 @@ tcpdump \- dump traffic on a network .na .B tcpdump [ -.B \-AdDefKlLnNOpqRStuUvxX +.B \-AdDefIKlLnNOpqRStuUvxX +] [ +.B \-B +.I buffer_size ] [ .B \-c .I count @@ -259,6 +262,9 @@ Reading a saved packet file doesn't require special privileges. Print each packet (minus its link level header) in ASCII. Handy for capturing web pages. .TP +.B \-B +Set the operating system capture buffer size to \fIbuffer_size\fP. +.TP .B \-c Exit after receiving \fIcount\fP packets. .TP @@ -399,6 +405,17 @@ used as the .I interface argument. .TP +.B \-I +Put the interface in "monitor mode"; this is supported only on IEEE +802.11 Wi-Fi interfaces, and supported only on some operating systems. +.IP +Note that in monitor mode the adapter might disassociate from the +network with which it's associated, so that you will not be able to use +any wireless networks with that adapter. This could prevent accessing +files on a network server, or resolving host names or network addresses, +if you are capturing in monitor mode and are not connected to another +network with another adapter. +.TP .B \-K Don't attempt to verify TCP checksums. This is useful for interfaces that perform the TCP checksum calculation in hardware; otherwise, @@ -1664,7 +1681,7 @@ is made to account for the time lag between when the Ethernet interface removed the packet from the wire and when the kernel serviced the `new packet' interrupt. .SH "SEE ALSO" -stty(1), pcap(3), pcap-filter(4), bpf(4), nit(4P), pfconfig(8) +stty(1), pcap(3PCAP), pcap-filter(4), bpf(4), nit(4P), pfconfig(8) .SH AUTHORS The original authors are: .LP |