diff --git a/sf.py b/sf.py index bacaacd351..e7b637598c 100755 --- a/sf.py +++ b/sf.py @@ -101,7 +101,7 @@ def handle_abort(signal, frame): p.add_argument("-m", metavar="mod1,mod2,...", type=str, help="Modules to enable.") p.add_argument("-M", "--modules", action='store_true', help="List available modules.") p.add_argument("-s", metavar="TARGET", help="Target for the scan.") - p.add_argument("-t", metavar="type1,type2,...", type=str, help="Event types to collect.") + p.add_argument("-t", metavar="type1,type2,...", type=str, help="Event types to collect (modules selected automatically).") p.add_argument("-T", "--types", action='store_true', help="List available event types.") p.add_argument("-o", metavar="tab|csv|json", type=str, help="Output format. Tab is default. If using json, -q is enforced.") p.add_argument("-H", action='store_true', help="Don't print field headers, just data.") @@ -110,7 +110,7 @@ def handle_abort(signal, frame): p.add_argument("-S", metavar="LENGTH", type=int, help="Maximum data length to display. By default, all data is shown.") p.add_argument("-D", metavar='DELIMITER', type=str, help="Delimiter to use for CSV output. Default is ,.") p.add_argument("-f", action='store_true', help="Filter out other event types that weren't requested with -t.") - p.add_argument("-F", metavar="FILTER", type=str, help="Show only a set of event types, comma-separated.") + p.add_argument("-F", metavar="type1,type2,...", type=str, help="Show only a set of event types, comma-separated.") p.add_argument("-x", action='store_true', help="STRICT MODE. Will only enable modules that can directly consume your target, and if -t was specified only those events will be consumed by modules. This overrides -t and -m options.") p.add_argument("-q", action='store_true', help="Disable logging. This will also hide errors!") args = p.parse_args()