source: tools/tracesplit/tracesplit.1 @ ff7d949

4.0.1-hotfixescachetimestampsdevelopdpdk-ndagetsilivegetfragoffhelplibtrace4ndag_formatpfringrc-4.0.1rc-4.0.2rc-4.0.3rc-4.0.4ringdecrementfixringperformanceringtimestampfixes
Last change on this file since ff7d949 was 0bfd4a0, checked in by Perry Lorier <perry@…>, 14 years ago
  • Correct tracemerge/tracesplit example
  • Clarify documentation for snapping packets
  • Property mode set to 100644
File size: 1.8 KB
Line 
1.TH TRACESPLIT "1" "October 2005" "tracesplit (libtrace)" "User Commands"
2.SH NAME
3tracesplit \- split traces
4.SH SYNOPSIS
5.B tracesplit
6[ \fB-f \fRbpf | \fB--filter=\fRbpf]
7[ \fB-c \fRcount | \fB--count=\fRcount]
8[ \fB-b \fRbytes | \fB--bytes=\fRbytes]
9[ \fB-i \fRseconds | \fB--seconds=\fRseconds]
10[ \fB-s \fRunixtime | \fB--starttime=\fRunixtime]
11[ \fB-e \fRunixtime | \fB--endtime=\fRunixtime]
12[ \fB-m \fRmaxfiles | \fB--maxfiles=\fRmaxfiles]
13[ \fB-S \fRsnaplen | \fB--snaplen=\fRsnaplen]
14inputuri outputuri ...
15.SH DESCRIPTION
16tracesplit splits one trace into multiple tracefiles
17.TP
18\fB\-f\fR bpf filter
19output only packets that match tcpdump style bpf filter
20
21.TP
22\fB\-c\fR count
23output count packets per output file.  The output file will be named after
24the basename given in the outputuri with the packet number of the first packet
25in this file.
26
27.TP
28\fB\-b\fR bytes
29output bytes bytes per file
30
31.TP
32\fB\-i\fR seconds
33start a new tracefile after "seconds" seconds
34
35.TP
36\fB\-s\fR unixtime
37don't output any packets before unixtime
38
39.TP
40\fB\-e\fR unixtime
41don't output any packets after unixtime
42
43.TP
44\fB\-m\fR maxfiles
45do not create more than "maxfiles" trace files
46
47.TP
48\fB\-S\fR snaplen
49Truncate packets to "snaplen" bytes long.  The default is collect the entire
50packet.
51
52.SH EXAMPLES
53create a 1MB erf trace of port 80 traffic.
54.nf
55tracesplit erf:/traces/bigtrace.gz \-f 'port 80' \-b $[ 1024 * 1024 ]
56erf:/traces/port80.gz
57.fi
58
59.SH LINKS
60More details about tracesplit (and libtrace) can be found at
61http://www.wand.net.nz/trac/libtrace/wiki/UserDocumentation
62
63.SH SEE ALSO
64libtrace(3), tracemerge(1), tracefilter(1), traceconvert(1), tracesplit_dir(1),
65tracereport(1), tracertstats(1), tracestats(1), tracedump(1), traceanon(1),
66tracesummary(1)
67
68.SH AUTHORS
69Perry Lorier <perry@cs.waikato.ac.nz>
Note: See TracBrowser for help on using the repository browser.