Lucent Technologies Ethereal manual Filename, Hexoct

Related command line tools

where <input-filename> specifies input filename (use - for standard input) <output-filename> specifies output filename (use - for standard output)

[options] are one or more of the following

-h	: Display this help message
-d	: Generate detailed debug of parser states
-o hexoct	: Parse offsets		as (h)ex or (o)ctal. Default is hex
-l typenum	: Specify link-layer type number. Default is 1 (Ethernet).
	See net/bpf.h		for list of numbers.
-q	: Generate no output at all (automatically turns off -d)
-e l3pid	: Prepend dummy		Ethernet II header with specified L3PID (in
	HEX)
	Example: -e 0x800
-i proto	: Prepend dummy		IP header with specified IP protocol (in
	DECIMAL).
	Automatically		prepends Ethernet header as well.
	Example: -i 46
-m max-packet	: Max packet length in output, default is 64000
-u srcp,destp	: Prepend dummy		UDP header with specified dest and source port
	(in DECIMAL).
	Automatically		prepends Ethernet and IP headers as well
	Example: -u 30,40
-T srcp,destp	: Prepend dummy		TCP header with specified dest and source port
	(in DECIMAL).
	Automatically		prepends Ethernet and IP headers as well
	Example: -T 50,60
-s srcp,dstp,tag: Prepend dummy			SCTP header with specified dest/source ports
	and verification tag (in DECIMAL).
	Automatically		prepends Ethernet and IP headers as well
	Example: -s 30,40,34
-S srcp,dstp,ppi: Prepend dummy			SCTP header with specified dest/source ports
	and verification tag 0. It also prepends a dummy SCTP DATA
	chunk header with payload protocol identifier ppi.
	Example: -S 30,40,34
-t timefmt	: Treats the text before the packet as a date/time code; the
	specified argument is a format string of the sort supported
	by strptime.
	Example: The time "10:15:14.5476" has the format code
	"%H:%M:%S."
	NOTE:	The subsecond component delimiter must be specified
		(.) but no pattern is required; the remaining numbe
		is assumed to be fractions of a second.

-w <filename>	Write the capture file generated by text2pcap to <filename>. The de-
	fault is to write to standard output.
-h	Display the help message
-d	Displays debugging information during the process. Can be used
	multiple times to generate more debugging information.
-q	Be completely quiet during the process.
-o hexoct	Specify the radix for the offsets (hex or octal). Defaults to hex. This
	corresponds to the -Aoption for od.
-l	Specify the link-layer type of this packet. Default is Ethernet(1). See
	net/bpf.h for the complete list of possible encapsulations. Note that
	this option should be used if your dump is a complete hex dump of
	an encapsulated packet and you wish to specify the exact type of en-
	capsulation. Example: -l 7 for ARCNet packets.

174