Skip to content

tauceti2/pcap_tools

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 

Repository files navigation

PCAP tools

Set of tools for manipulating with PCAP files.

pcap_filter

pcap_filter - strip payload from the packets in PCAP file - filter PCAP file using libpcap filters

Usage: ./pcap_filter [-s] [-f "filter"] [-o dump_filename] -i input_file

    -i input file, must be in format which can be read by pcap library, supports only ethernet encapsulation
    -s strip packet payload, leave only packet headers (Ethernet, IP, TCP/UDP)
    -o output file, will be written in PCAP format
    -f filter (similar to tcpdump filters)

joining pcap files

The simples way how to concat more pcap files into the one:

./head -q -c -24 pcap_file1 pcap_file2 pcap_file3 ... > big_pcal

About

Set of tools for manipulating with PCAP files.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages