/usr/share/wireshark/dftest.html is in libwireshark-data 1.10.6-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 | <?xml version="1.0" ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>dftest - The Wireshark Network Analyzer 1.10.6</title>
<link rel="stylesheet" href="../docbook/ws.css" type="text/css" />
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<link rev="made" href="mailto:root@localhost" />
</head>
<body>
<h1 id="NAME">NAME</h1>
<p>dftest - Shows display filter byte-code, for debugging dfilter routines.</p>
<h1 id="SYNOPSIS">SYNOPSIS</h1>
<p><b>dftest</b> <span style="white-space: nowrap;">[ <filter> ]</span></p>
<h1 id="DESCRIPTION">DESCRIPTION</h1>
<p><b>dftest</b> is a simple tool which compiles a display filter and shows its bytecode.</p>
<h1 id="OPTIONS">OPTIONS</h1>
<dl>
<dt id="filter">filter</dt>
<dd>
<p>The display filter expression. If needed it has to be quoted.</p>
</dd>
</dl>
<h1 id="EXAMPLES">EXAMPLES</h1>
<p>Show how the IP protocol is filtered:</p>
<pre><code> dftest ip</code></pre>
<p>Shows how frame 150 is filtered:</p>
<pre><code> dftest "frame.number == 150"</code></pre>
<h1 id="SEE-ALSO">SEE ALSO</h1>
<p>wireshark-filter(4)</p>
</body>
</html>
|