Merge pull request #14 from KilianDargel/master

Added formatting option.

CHANGELOG.md

@@ -1,3 +1,7 @@
+## v1.1.0- Feature:
+
+- Added formatting option
+
 ## v1.0.1
 
 - Fix: Apply filter to all interfaces

Dockerfile

@@ -9,6 +9,7 @@ ENV IFACE="any"
 ENV MAXFILESIZE="1000"
 ENV MAXFILENUM="10"
 ENV FILENAME="dump"
+ENV FORMAT="pcapng"
 
 USER root:root
 

README.md

@@ -22,6 +22,7 @@ These options are configurable:
 | `MAXFILENUM`  |          `10` |
 | `DURATION`    |          `""` |
 | `FILENAME`    |        `dump` |
+| `FORMAT`      |      `pcapng` |
 
 `IFACE` is the interface tshark should listen on.
 
@@ -41,6 +42,10 @@ The `FILENAME` variable sets the filename that is used. The default value is
 information). To dump on multiple interfaces simply add more interfaces to this 
 variable seperated by a whitespace (e.g. "eth0 eth1").
 
+`FORMAT` sets the file-format of the written trace. Note that when you're setting
+the `FORMAT` to `pcap` for example, the `FILENAME` has to be changed to `dump.pcap`.
+Other formats are described in the [official tshark documentation](https://www.wireshark.org/docs/man-pages/tshark.html).
+
 Example:
 
 ```

run.sh

@@ -35,4 +35,4 @@ then
   BUFFEROPTS="$BUFFEROPTS -b duration:$DURATION"
 fi
 
-/usr/bin/tshark $BUFFEROPTS -w "/data/$FILENAME" -f "$FILTER" $INTERFACES 
+/usr/bin/tshark $BUFFEROPTS -w "/data/$FILENAME" -f "$FILTER" $INTERFACES -F $FORMAT