Changes between Version 2 and Version 3 of TraceDump


Ignore:
Timestamp:
07/18/08 10:08:09 (13 years ago)
Author:
spa1
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • TraceDump

    v2 v3  
    1 {{{tracedump}}} is a libtrace tool that can display packets in a readable format.
     1{{{tracepktdump}}} is a libtrace tool that can display packets in a readable format.
    22
    33=== Usage ===
    4 {{{tracedump  [  -f exp | --filter=exp ] [ -c num | --count=num ] inputuri ...}}}
     4{{{tracepktdump  [  -f exp | --filter=exp ] [ -c num | --count=num ] inputuri ...}}}
    55
    66=== Options ===
     
    1313==== Examine packets from a particular flow ====
    1414{{{
    15 tracedump -f "host 192.168.2.110 and host 192.168.2.112 and tcp port 25 and tcp port 5662" erf:trace.erf.gz
     15tracepktdump -f "host 192.168.2.110 and host 192.168.2.112 and tcp port 25 and tcp port 5662" erf:trace.erf.gz
    1616}}}
    1717
    1818=== Details ===
    19 {{{tracedump}}} uses the libpacketdump library which can parse and neatly display the contents of many common packet headers, including Ethernet, IP, TCP, UDP, ICMP and many others.
     19{{{tracepktdump}}} uses the libpacketdump library which can parse and neatly display the contents of many common packet headers, including Ethernet, IP, TCP, UDP, ICMP and many others.
     20
     21=== Notes ===
     22{{{tracepktdump}}} replaces the {{{tracedump}}} tool that was present in older versions of libtrace.