[Guy Harris <guy@xxxxxxxxxxxx>]

On May 7, 2009, at 12:26 PM, Michael Tüxen wrote:

> > dumpcap -n -i dag0:2,'sctp && host 1.2.3.4' -i en0
>
> But we also have -y and -s... So taking this path requires something
> like
> -i interface_name,capture_filer,link_type,snap_length
> How does this look like?

It looks like

	dumpcap -n -i dag0:2,filter='sctp && host  
1.2.3.4',snaplen=128,linktype=DOCSIS

as neither the filter nor the snapshot length nor the link-layer  
header type are required, so you'd either have to support empty  
arguments or support tagged arguments.