/usr/share/doc/wireshark-doc/wsug_html_chunked/ChapterCapture.html is in wireshark-doc 2.0.2+ga16e22e-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 | <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 4. Capturing Live Network Data</title><link rel="stylesheet" type="text/css" href="ws.css"><meta name="generator" content="DocBook XSL Stylesheets V1.79.1"><link rel="home" href="index.html" title="Wireshark User Guide"><link rel="up" href="index.html" title="Wireshark User Guide"><link rel="prev" href="ChUseStatusbarSection.html" title="3.21. The Statusbar"><link rel="next" href="ChCapPrerequisitesSection.html" title="4.2. Prerequisites"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 4. Capturing Live Network Data</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ChUseStatusbarSection.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="ChCapPrerequisitesSection.html">Next</a></td></tr></table><hr></div><div class="chapter"><div class="titlepage"><div><div><h1 class="title"><a name="ChapterCapture"></a>Chapter 4. Capturing Live Network Data</h1></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl class="toc"><dt><span class="section"><a href="ChapterCapture.html#ChCapIntroduction">4.1. Introduction</a></span></dt><dt><span class="section"><a href="ChCapPrerequisitesSection.html">4.2. Prerequisites</a></span></dt><dt><span class="section"><a href="ChCapCapturingSection.html">4.3. Start Capturing</a></span></dt><dt><span class="section"><a href="ChCapInterfaceSection.html">4.4. The “Capture Interfaces” dialog box</a></span></dt><dt><span class="section"><a href="ChCapCaptureOptions.html">4.5. The “Capture Options” dialog box</a></span></dt><dd><dl><dt><span class="section"><a href="ChCapCaptureOptions.html#_capture_frame">4.5.1. Capture frame</a></span></dt><dt><span class="section"><a href="ChCapCaptureOptions.html#_capture_file_s_frame">4.5.2. Capture File(s) frame</a></span></dt><dt><span class="section"><a href="ChCapCaptureOptions.html#_stop_capture_8230_frame">4.5.3. Stop Capture… frame</a></span></dt><dt><span class="section"><a href="ChCapCaptureOptions.html#_display_options_frame">4.5.4. Display Options frame</a></span></dt><dt><span class="section"><a href="ChCapCaptureOptions.html#_name_resolution_frame">4.5.5. Name Resolution frame</a></span></dt><dt><span class="section"><a href="ChCapCaptureOptions.html#_buttons">4.5.6. Buttons</a></span></dt></dl></dd><dt><span class="section"><a href="ChCapEditInterfaceSettingsSection.html">4.6. The “Edit Interface Settings” dialog box</a></span></dt><dt><span class="section"><a href="ChCapCompileSelectedBpfsSection.html">4.7. The “Compile Results” dialog box</a></span></dt><dt><span class="section"><a href="ChCapManageInterfacesSection.html">4.8. The “Add New Interfaces” dialog box</a></span></dt><dd><dl><dt><span class="section"><a href="ChCapManageInterfacesSection.html#_add_or_remove_pipes">4.8.1. Add or remove pipes</a></span></dt><dt><span class="section"><a href="ChCapManageInterfacesSection.html#_add_or_hide_local_interfaces">4.8.2. Add or hide local interfaces</a></span></dt><dt><span class="section"><a href="ChCapManageInterfacesSection.html#_add_or_hide_remote_interfaces">4.8.3. Add or hide remote interfaces</a></span></dt></dl></dd><dt><span class="section"><a href="ChCapInterfaceRemoteSection.html">4.9. The “Remote Capture Interfaces” dialog box</a></span></dt><dd><dl><dt><span class="section"><a href="ChCapInterfaceRemoteSection.html#_remote_capture_interfaces">4.9.1. Remote Capture Interfaces</a></span></dt><dt><span class="section"><a href="ChCapInterfaceRemoteSection.html#_remote_capture_settings">4.9.2. Remote Capture Settings</a></span></dt></dl></dd><dt><span class="section"><a href="ChCapInterfaceDetailsSection.html">4.10. The “Interface Details” dialog box</a></span></dt><dt><span class="section"><a href="ChCapCaptureFiles.html">4.11. Capture files and file modes</a></span></dt><dt><span class="section"><a href="ChCapLinkLayerHeader.html">4.12. Link-layer header type</a></span></dt><dt><span class="section"><a href="ChCapCaptureFilterSection.html">4.13. Filtering while capturing</a></span></dt><dd><dl><dt><span class="section"><a href="ChCapCaptureFilterSection.html#ChCapCaptureAutoFilterSection">4.13.1. Automatic Remote Traffic Filtering</a></span></dt></dl></dd><dt><span class="section"><a href="ChCapRunningSection.html">4.14. While a Capture is running …</a></span></dt><dd><dl><dt><span class="section"><a href="ChCapRunningSection.html#ChCapStopSection">4.14.1. Stop the running capture</a></span></dt><dt><span class="section"><a href="ChCapRunningSection.html#ChCapRestartSection">4.14.2. Restart a running capture</a></span></dt></dl></dd></dl></div><div class="section"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="ChCapIntroduction"></a>4.1. Introduction</h2></div></div></div><p>Capturing live network data is one of the major features of Wireshark.</p><p>The Wireshark capture engine provides the following features:</p><div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
Capture from different kinds of network hardware such as Ethernet or 802.11.
</li><li class="listitem">
Stop the capture on different triggers such as the amount of captured data,
elapsed time, or the number of packets.
</li><li class="listitem">
Simultaneously show decoded packets while Wireshark is capturing.
</li><li class="listitem">
Filter packets, reducing the amount of data to be captured. See
<a class="xref" href="ChCapCaptureFilterSection.html" title="4.13. Filtering while capturing">Section 4.13, “Filtering while capturing”</a>.
</li><li class="listitem">
Save packets in multiple files while doing a long term capture, optionally
rotating through a fixed number of files (a “ringbuffer”). See
<a class="xref" href="ChCapCaptureFiles.html" title="4.11. Capture files and file modes">Section 4.11, “Capture files and file modes”</a>.
</li><li class="listitem">
Simultaneously capture from multiple network interfaces.
</li></ul></div><p>The capture engine still lacks the following features:</p><div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
Stop capturing (or perform some other action) depending on the captured data.
</li></ul></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ChUseStatusbarSection.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="ChCapPrerequisitesSection.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">3.21. The Statusbar </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> 4.2. Prerequisites</td></tr></table></div></body></html>
|