forked from osmocom/wireshark
Strip out the CR's, set svn:eol-style to native, and get rid of the
svn:executable property. svn path=/trunk/; revision=11569
This commit is contained in:
Guy Harris
parent
a75fe4ae94
commit
09876f59d4
|
|
@ -1,206 +1,206 @@
|
||||||
|
|
||||||
=head1 NAME
|
=head1 NAME
|
||||||
|
|
||||||
capinfo - Prints information about binary capture files
|
capinfo - Prints information about binary capture files
|
||||||
|
|
||||||
=head1 SYNOPSYS
|
=head1 SYNOPSYS
|
||||||
|
|
||||||
B<capinfo>
|
B<capinfo>
|
||||||
S<[ B<-t> ]>
|
S<[ B<-t> ]>
|
||||||
S<[ B<-c> ]>
|
S<[ B<-c> ]>
|
||||||
S<[ B<-s> ]>
|
S<[ B<-s> ]>
|
||||||
S<[ B<-d> ]>
|
S<[ B<-d> ]>
|
||||||
S<[ B<-u> ]>
|
S<[ B<-u> ]>
|
||||||
S<[ B<-a> ]>
|
S<[ B<-a> ]>
|
||||||
S<[ B<-e> ]>
|
S<[ B<-e> ]>
|
||||||
S<[ B<-y> ]>
|
S<[ B<-y> ]>
|
||||||
S<[ B<-i> ]>
|
S<[ B<-i> ]>
|
||||||
S<[ B<-z> ]>
|
S<[ B<-z> ]>
|
||||||
S<[ B<-h> ]>
|
S<[ B<-h> ]>
|
||||||
I<capfile>
|
I<capfile>
|
||||||
|
|
||||||
=head1 DESCRIPTION
|
=head1 DESCRIPTION
|
||||||
|
|
||||||
B<Capinfo> is a program that reads a saved capture file and returns any
|
B<Capinfo> is a program that reads a saved capture file and returns any
|
||||||
or all of several statistics about that file. B<Capinfo> is able to detect
|
or all of several statistics about that file. B<Capinfo> is able to detect
|
||||||
and read any capture supported by the B<Ethereal> package.
|
and read any capture supported by the B<Ethereal> package.
|
||||||
|
|
||||||
B<Capinfo> can read the following file formats:
|
B<Capinfo> can read the following file formats:
|
||||||
|
|
||||||
=over 4
|
=over 4
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
libpcap/WinPcap, tcpdump and various other tools using tcpdump's capture format
|
libpcap/WinPcap, tcpdump and various other tools using tcpdump's capture format
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
B<snoop> and B<atmsnoop>
|
B<snoop> and B<atmsnoop>
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
Shomiti/Finisar B<Surveyor> captures
|
Shomiti/Finisar B<Surveyor> captures
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
Novell B<LANalyzer> captures
|
Novell B<LANalyzer> captures
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
Microsoft B<Network Monitor> captures
|
Microsoft B<Network Monitor> captures
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
AIX's B<iptrace> captures
|
AIX's B<iptrace> captures
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
Cinco Networks B<NetXRay> captures
|
Cinco Networks B<NetXRay> captures
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
Network Associates Windows-based B<Sniffer> captures
|
Network Associates Windows-based B<Sniffer> captures
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
Network General/Network Associates DOS-based B<Sniffer> (compressed or uncompressed) captures
|
Network General/Network Associates DOS-based B<Sniffer> (compressed or uncompressed) captures
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
AG Group/WildPackets B<EtherPeek>/B<TokenPeek>/B<AiroPeek>/B<EtherHelp>/B<PacketGrabber> captures
|
AG Group/WildPackets B<EtherPeek>/B<TokenPeek>/B<AiroPeek>/B<EtherHelp>/B<PacketGrabber> captures
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
B<RADCOM>'s WAN/LAN analyzer captures
|
B<RADCOM>'s WAN/LAN analyzer captures
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
Network Instruments B<Observer> version 9 captures
|
Network Instruments B<Observer> version 9 captures
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
B<Lucent/Ascend> router debug output
|
B<Lucent/Ascend> router debug output
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
files from HP-UX's B<nettl>
|
files from HP-UX's B<nettl>
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
B<Toshiba's> ISDN routers dump output
|
B<Toshiba's> ISDN routers dump output
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
the output from B<i4btrace> from the ISDN4BSD project
|
the output from B<i4btrace> from the ISDN4BSD project
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
traces from the B<EyeSDN> USB S0.
|
traces from the B<EyeSDN> USB S0.
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
the output in B<IPLog> format from the Cisco Secure Intrusion Detection System
|
the output in B<IPLog> format from the Cisco Secure Intrusion Detection System
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
B<pppd logs> (pppdump format)
|
B<pppd logs> (pppdump format)
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
the output from VMS's B<TCPIPtrace>/B<TCPtrace>/B<UCX$TRACE> utilities
|
the output from VMS's B<TCPIPtrace>/B<TCPtrace>/B<UCX$TRACE> utilities
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
the text output from the B<DBS Etherwatch> VMS utility
|
the text output from the B<DBS Etherwatch> VMS utility
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
Visual Networks' B<Visual UpTime> traffic capture
|
Visual Networks' B<Visual UpTime> traffic capture
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
the output from B<CoSine> L2 debug
|
the output from B<CoSine> L2 debug
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
the output from Accellent's B<5Views> LAN agents
|
the output from Accellent's B<5Views> LAN agents
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
Endace Measurement Systems' ERF format captures
|
Endace Measurement Systems' ERF format captures
|
||||||
|
|
||||||
=item *
|
=item *
|
||||||
Linux Bluez Bluetooth stack B<hcidump -w> traces
|
Linux Bluez Bluetooth stack B<hcidump -w> traces
|
||||||
|
|
||||||
=back
|
=back
|
||||||
|
|
||||||
There is no need to tell B<Capinfo> what type of
|
There is no need to tell B<Capinfo> what type of
|
||||||
file you are reading; it will determine the file type by itself.
|
file you are reading; it will determine the file type by itself.
|
||||||
B<Capinfo> is also capable of reading any of these file formats if they
|
B<Capinfo> is also capable of reading any of these file formats if they
|
||||||
are compressed using gzip. B<Capinfo> recognizes this directly from the
|
are compressed using gzip. B<Capinfo> recognizes this directly from the
|
||||||
file; the '.gz' extension is not required for this purpose.
|
file; the '.gz' extension is not required for this purpose.
|
||||||
|
|
||||||
The user specifies which statistics to report by specifying flags
|
The user specifies which statistics to report by specifying flags
|
||||||
corresponding to the statistic. If no flags are specified, B<Capinfo> will
|
corresponding to the statistic. If no flags are specified, B<Capinfo> will
|
||||||
report all statistics available.
|
report all statistics available.
|
||||||
|
|
||||||
=head1 OPTIONS
|
=head1 OPTIONS
|
||||||
|
|
||||||
=over 4
|
=over 4
|
||||||
|
|
||||||
=item -t
|
=item -t
|
||||||
|
|
||||||
Displays the capture type of the capture file.
|
Displays the capture type of the capture file.
|
||||||
|
|
||||||
=item -c
|
=item -c
|
||||||
|
|
||||||
Counts the number of packets in the capture file.
|
Counts the number of packets in the capture file.
|
||||||
|
|
||||||
=item -s
|
=item -s
|
||||||
|
|
||||||
Displays the size of the file, in bytes. This reports
|
Displays the size of the file, in bytes. This reports
|
||||||
the size of the capture file itself.
|
the size of the capture file itself.
|
||||||
|
|
||||||
=item -d
|
=item -d
|
||||||
|
|
||||||
Displays the total length of all packets in the file, in
|
Displays the total length of all packets in the file, in
|
||||||
bytes. This counts the size of the packets as they appeared
|
bytes. This counts the size of the packets as they appeared
|
||||||
in their original form, not as they appear in this file.
|
in their original form, not as they appear in this file.
|
||||||
For example, if a packet was originally 1514 bytes and only
|
For example, if a packet was originally 1514 bytes and only
|
||||||
256 of those bytes were saved to the capture file (if packets
|
256 of those bytes were saved to the capture file (if packets
|
||||||
were captured with a snaplen or other slicing option),
|
were captured with a snaplen or other slicing option),
|
||||||
B<Capinfo> will consider the packet to have been 1514 bytes.
|
B<Capinfo> will consider the packet to have been 1514 bytes.
|
||||||
|
|
||||||
=item -u
|
=item -u
|
||||||
|
|
||||||
Displays the capture duration, in seconds. This is the
|
Displays the capture duration, in seconds. This is the
|
||||||
difference in time between the earliest packet seen and
|
difference in time between the earliest packet seen and
|
||||||
latest packet seen.
|
latest packet seen.
|
||||||
|
|
||||||
=item -a
|
=item -a
|
||||||
|
|
||||||
Displays the start time of the capture. B<Capinfo> considers
|
Displays the start time of the capture. B<Capinfo> considers
|
||||||
the earliest timestamp seen to be the start time, so the
|
the earliest timestamp seen to be the start time, so the
|
||||||
first packet in the capture is not necessarily the earliest -
|
first packet in the capture is not necessarily the earliest -
|
||||||
if packets exist "out-of-order", time-wise, in the capture,
|
if packets exist "out-of-order", time-wise, in the capture,
|
||||||
B<Capinfo> detects this.
|
B<Capinfo> detects this.
|
||||||
|
|
||||||
=item -e
|
=item -e
|
||||||
|
|
||||||
Displays the end time of the capture. B<Capinfo> considers
|
Displays the end time of the capture. B<Capinfo> considers
|
||||||
the latest timestamp seen to be the end time, so the
|
the latest timestamp seen to be the end time, so the
|
||||||
last packet in the capture is not necessarily the latest -
|
last packet in the capture is not necessarily the latest -
|
||||||
if packets exist "out-of-order", time-wise, in the capture,
|
if packets exist "out-of-order", time-wise, in the capture,
|
||||||
B<Capinfo> detects this.
|
B<Capinfo> detects this.
|
||||||
|
|
||||||
=item -y
|
=item -y
|
||||||
|
|
||||||
Displays the average data rate, in bytes
|
Displays the average data rate, in bytes
|
||||||
|
|
||||||
=item -i
|
=item -i
|
||||||
|
|
||||||
Displays the average data rate, in bits
|
Displays the average data rate, in bits
|
||||||
|
|
||||||
=item -z
|
=item -z
|
||||||
|
|
||||||
displays the average packet size, in bytes
|
displays the average packet size, in bytes
|
||||||
|
|
||||||
=item -h
|
=item -h
|
||||||
|
|
||||||
Prints the help listing and exits.
|
Prints the help listing and exits.
|
||||||
|
|
||||||
=back
|
=back
|
||||||
|
|
||||||
=head1 SEE ALSO
|
=head1 SEE ALSO
|
||||||
|
|
||||||
I<tcpdump(8)>, I<pcap(3)>, I<ethereal(1)>, I<mergecap(1)>, I<editcap(1)>, I<tethereal(1)>
|
I<tcpdump(8)>, I<pcap(3)>, I<ethereal(1)>, I<mergecap(1)>, I<editcap(1)>, I<tethereal(1)>
|
||||||
|
|
||||||
=head1 NOTES
|
=head1 NOTES
|
||||||
|
|
||||||
B<Capinfo> is part of the B<Ethereal> distribution. The latest version
|
B<Capinfo> is part of the B<Ethereal> distribution. The latest version
|
||||||
of B<Ethereal> can be found at B<http://www.ethereal.com>.
|
of B<Ethereal> can be found at B<http://www.ethereal.com>.
|
||||||
|
|
||||||
=head1 AUTHORS
|
=head1 AUTHORS
|
||||||
|
|
||||||
Original Author
|
Original Author
|
||||||
-------- ------
|
-------- ------
|
||||||
Ian Schorr <ian[AT]ianschorr.com>
|
Ian Schorr <ian[AT]ianschorr.com>
|
||||||
|
|
||||||
|
|
||||||
Contributors
|
Contributors
|
||||||
------------
|
------------
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue