Lucent Technologies Ethereal User Manual
Page 158
-m <font>
This option sets the name of the font used for most text dis-
played by Ethereal. XXX - add an example!
-n
Disable network object name resolution (such as hostname,
TCP and UDP port names).
-N <name resolving flags>
Turns on name resolving for particular types of addresses and
port numbers; the argument is a string that may contain the
letters m to enable MAC address resolution, n to enable net-
work address resolution, and t to enable transport-layer port
number resolution. This overrides -n if both -N and -n are
present. The letter C enables concurrent (asynchronous) DNS
lookups.
-o <preference/recent settings>
Sets a preference or recent value, overriding the default value
and any value read from a preference/recent file. The argu-
ment to the flag is a string of the form prefname:value, where
prefname is the name of the preference (which is the same
name that would appear in the preference/recent file), and
value is the value to which it should be set. Multiple instances
of -o <preference settings> can be given on a single com-
mand line.
An example of setting a single preference would be:
ethereal -o mgcp.display_dissect_tree:TRUE
An example of setting multiple preferences would be:
ethereal
-o
mgcp.display_dissect_tree:TRUE
-o
mgcp.udp.callagent_port:2627
Tip!
You can get a list of all available preference
strings from the preferences file, see
Ap-
pendix A, Configuration (and other) Files and
Folders
-p
Don't put the interface into promiscuous mode. Note that the
interface might be in promiscuous mode for some other reas-
on; hence, -p cannot be used to ensure that the only traffic
that is captured is traffic sent to or from the machine on
which Ethereal is running, broadcast traffic, and multicast
traffic to addresses received by that machine.
-Q
This option forces Ethereal to exit when capturing is com-
plete. It can be used with the -c option. It must be used in
conjunction with the -i and -w options.
-r <infile>
This option provides the name of a capture file for Ethereal to
read and display. This capture file can be in one of the
formats Ethereal understands.
-R <read (display) filter>
This option specifies a display filter to be applied when read-
ing packets from a capture file. The syntax of this filter is that
of the display filters discussed in
. Packets not matching the filter are dis-
carded.
-s <capture snaplen>
This option specifies the snapshot length to use when captur-
ing packets. Ethereal will only capture <snaplen> bytes of
Customizing Ethereal
144