source: tools/traceanon/traceanon.1 @ 8e99466

4.0.1-hotfixescachetimestampsdevelopdpdk-ndagetsilivegetfragoffhelplibtrace4ndag_formatpfringrc-4.0.1rc-4.0.2rc-4.0.3rc-4.0.4ringdecrementfixringperformanceringtimestampfixes
Last change on this file since 8e99466 was eb6f2ea, checked in by Perry Lorier <perry@…>, 16 years ago

Rip out the functionality that's provided by tracesplit, we don't need to
duplicate it here.

  • Property mode set to 100644
File size: 1.7 KB
Line 
1.TH TRACEANON "1" "October 2005" "traceanon (libtrace)" "User Commands"
2.SH NAME
3traceanon \- anonymise ip addresses of traces
4.SH SYNOPSIS
5.B traceanon
6[ \-s | \-\^\-encrypt-source ]
7[ \-d | \-\^\-encrypt-dest ]
8[ \-p prefix | \-\^\-prefix=prefix ]
9[ \-c key | \-\^\-cryptopan=key ]
10.SH DESCRPTION
11traceanon anonymises a trace by replacing IP addresses found in the IP header,
12and any embedded packets inside an ICMP packet.  It also fixes the checksums
13inside TCP and UDP headers.
14
15Two anonymisation schemes are supported, the first replaces a prefix with
16another prefix.  This can be used for instance to replace a /16 with the
17equivilent prefix from RFC1918.  The other scheme is cryptopan which is a
18prefix preserving encryption scheme based on AES.
19.TP
20.PD 0
21.BI \-s
22.TP
23.PD
24.BI \-\^\-encrypt-source
25encrypt only source ip addresses.
26
27.TP
28.PD 0
29.BI \-d
30.TP
31.PD
32.BI \-\^\-encrypt-dest
33encrypt only destination ip addresses.
34
35.TP
36.PD 0
37.BI \-p
38.TP
39.PD
40.BI \-\^\-prefix=prefix
41substitute the high bits of the IP addresses with the provided prefix.
42
43.TP
44.PD 0
45.BI \-c
46.TP
47.PD
48.BI \-\^\-cryptopan=key
49encrypt the IP addresses using the prefix-preserving cryptopan method using
50the key "key".  The key can be up to 32 bytes long, and will be padded with
51NUL charactors.
52
53
54.SH EXAMPLES
55.nf
56traceanon \-\^\-cryptopan="fish go moo, oh yes they do" \\
57        \-\^\-encrypt-source \\
58        \-\^\-encrypt-dest \\
59        erf:/traces/unenc.gz \\
60        erf:/traces/enc.gz \\
61.fi
62
63.SH BUGS
64This software should support encrypting based on the direction/interface flag.
65
66IP addresses inside ARP's are not encrypted.
67
68.SH SEE ALSO
69libtrace(3), tracemerge(1), tracefilter(1), traceconvert(1), tracestats(1),
70tracesummary(1)
71
72.SH AUTHORS
73Perry Lorier <perry@cs.waikato.ac.nz>
Note: See TracBrowser for help on using the repository browser.