diff --git a/userspace/digwatch/digwatch.cpp b/userspace/digwatch/digwatch.cpp index 635eb2b3..7320f5f9 100644 --- a/userspace/digwatch/digwatch.cpp +++ b/userspace/digwatch/digwatch.cpp @@ -46,9 +46,10 @@ static void usage() "Usage: digwatch [options] rules_filename\n\n" "Options:\n" " -h, --help Print this page\n" + " -c Configuration file (default " DIGWATCH_SOURCE_CONF_FILE ", " DIGWATCH_INSTALL_CONF_FILE ")\n" " -o Output type (options are 'stdout', 'syslog', default is 'stdout')\n" - " -r , --read=\n" - " Read the events from .\n" + " -e Read the events from (in .scap format) instead of tapping into live.\n" + " -r Rules configuration file (defaults to value set in configuration file, or /etc/digwatch_rules.conf).\n" "\n" ); } @@ -212,7 +213,6 @@ int digwatch_init(int argc, char **argv) static struct option long_options[] = { {"help", no_argument, 0, 'h' }, - {"readfile", required_argument, 0, 'r' }, {0, 0, 0, 0} }; @@ -225,7 +225,7 @@ int digwatch_init(int argc, char **argv) // Parse the args // while((op = getopt_long(argc, argv, - "c:ho:r:u:", + "c:ho:e:r:", long_options, &long_index)) != -1) { switch(op) @@ -244,10 +244,10 @@ int digwatch_init(int argc, char **argv) } output_name = optarg; break; - case 'r': + case 'e': scap_filename = optarg; break; - case 'u': + case 'r': rules_filename = optarg; break; case '?':