Changeset 1348

Show
Ignore:
Timestamp:
05/05/08 09:29:56 (8 months ago)
Author:
perry
Message:

* Correct tracemerge/tracesplit example
* Clarify documentation for snapping packets

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/tools/tracesplit/tracesplit.1

    r1199 r1348  
    4747.TP 
    4848\fB\-S\fR snaplen 
    49 Truncate packets to "snaplen" bytes long. 
     49Truncate packets to "snaplen" bytes long.  The default is collect the entire 
     50packet. 
    5051 
    5152.SH EXAMPLES 
    5253create a 1MB erf trace of port 80 traffic. 
    5354.nf 
    54 tracemerge erf:/traces/bigtrace.gz \-f 'port 80' \-b $[ 1024 * 1024 ]  
     55tracesplit erf:/traces/bigtrace.gz \-f 'port 80' \-b $[ 1024 * 1024 ]  
    5556erf:/traces/port80.gz  
    5657.fi