wiki:TraceConvert

traceconvert is a libtrace tool that takes a single libtrace input (which can be either an existing trace or a live capture input) and writes the contents to any libtrace supported output format.

Usage

traceconvert inputuri outputuri

Applications

Converting from one trace format to another

traceconvert erf:mytrace.erf.gz pcapfile:mytrace.pcap.gz

Capturing live data and writing it to disk

traceconvert int:eth0 pcapfile:mytrace.pcap.gz

Replaying a trace onto an interface

traceconvert pcapfile:mytrace.pcap.gz int:eth0

Note: this will replay the trace exactly as it was captured, i.e. IP headers, link level headers etc will all be unaltered.

Notes

traceconvert does not currently support setting a compression method or level, so will always write gzip level 1 compressed output. For more control over compression, use tracesplit instead.

Last modified 10 years ago Last modified on 07/28/10 13:28:07