source: tools/traceanon/traceanon.1 @ c988da9

4.0.1-hotfixescachetimestampsdevelopdpdk-ndagetsilivegetfragoffhelplibtrace4ndag_formatpfringrc-4.0.1rc-4.0.2rc-4.0.3rc-4.0.4ringdecrementfixringperformanceringtimestampfixes
Last change on this file since c988da9 was 634089d, checked in by Shane Alcock <salcock@…>, 14 years ago

Bringing a lot of the manpages up to date as well as adding a link to the wiki

  • Property mode set to 100644
File size: 1.9 KB
Line 
1.TH TRACEANON "1" "October 2005" "traceanon (libtrace)" "User Commands"
2.SH NAME
3traceanon \- anonymise ip addresses of traces
4.SH SYNOPSIS
5.B traceanon
6[ \-s | \-\^\-encrypt-source ]
7[ \-d | \-\^\-encrypt-dest ]
8[ \-p prefix | \-\^\-prefix=prefix ]
9[ \-c key | \-\^\-cryptopan=key ]
10sourceuri
11desturi
12.SH DESCRPTION
13traceanon anonymises a trace by replacing IP addresses found in the IP header,
14and any embedded packets inside an ICMP packet.  It also fixes the checksums
15inside TCP and UDP headers.
16
17Two anonymisation schemes are supported, the first replaces a prefix with
18another prefix.  This can be used for instance to replace a /16 with the
19equivilent prefix from RFC1918.  The other scheme is cryptopan which is a
20prefix preserving encryption scheme based on AES.
21.TP
22.PD 0
23.BI \-s
24.TP
25.PD
26.BI \-\^\-encrypt-source
27encrypt only source ip addresses.
28
29.TP
30.PD 0
31.BI \-d
32.TP
33.PD
34.BI \-\^\-encrypt-dest
35encrypt only destination ip addresses.
36
37.TP
38.PD 0
39.BI \-p
40.TP
41.PD
42.BI \-\^\-prefix=prefix
43substitute the high bits of the IP addresses with the provided prefix.
44
45.TP
46.PD 0
47.BI \-c
48.TP
49.PD
50.BI \-\^\-cryptopan=key
51encrypt the IP addresses using the prefix-preserving cryptopan method using
52the key "key".  The key can be up to 32 bytes long, and will be padded with
53NUL charactors.
54
55
56.SH EXAMPLES
57.nf
58traceanon \-\^\-cryptopan="fish go moo, oh yes they do" \\
59        \-\^\-encrypt-source \\
60        \-\^\-encrypt-dest \\
61        erf:/traces/unenc.gz \\
62        erf:/traces/enc.gz \\
63.fi
64
65.SH BUGS
66This software should support encrypting based on the direction/interface flag.
67
68IP addresses inside ARP's are not encrypted.
69
70.SH LINKS
71More details about traceanon (and libtrace) can be found at
72http://www.wand.net.nz/trac/libtrace/wiki/UserDocumentation
73
74.SH SEE ALSO
75libtrace(3), tracemerge(1), tracefilter(1), traceconvert(1), tracestats(1),
76tracesummary(1), tracertstats(1), tracesplit(1), tracesplit_dir(1),
77tracereport(1), tracedump(1)
78
79.SH AUTHORS
80Perry Lorier <perry@cs.waikato.ac.nz>
Note: See TracBrowser for help on using the repository browser.