UMN:CLI

User Manual

 

SURPASS hiD 6615 S223/S323 R1.5

 

 

 

Tab. 7.4 shows the options for packet dump.

Option

Description

 

 

-a

Change Network & Broadcast address to name.

 

 

-d

Change the complied packet-matching code to readable letters and close it

 

 

-e

Output link-level header of each line

 

 

-f

Output outer internet address as symbol

 

 

-l

Buffer output data in line. This is useful when other application tries to receive data from

tcpdump.

 

 

 

-n

Do not translate all address (e.g. port, host address)

 

 

-N

When output host name, do not print domain.

 

 

-O

Do not run packet-matching code optimizer. This option is used to find bug in optimizer

 

 

-p

Interface is not remained in promiscuous mode

 

 

-q

Reduce output quantity of protocol information. Therefore, output line is shorter.

 

 

-S

Output TCP sequence number not relative but absolute

 

 

-t

Time is not displayed on each output line

 

 

-v

Display more information

 

 

-w

Save the captured packets in a file instead of output

 

 

-x

Display each packet as hexacode

 

 

-cNUMBER

Close the debug after receive packets as many as the number

 

 

-FFILE

Recieves file as filter expression. All additional expressions on command line are ignored.

 

 

 

Desinate the interface where the intended packets are transmitted. If not designated, it

-iINTERFACE

automatically select a interface which has the lowest number within the system interfaces

 

(Loopback is excepted)

 

 

-rFILE

Read packets from the file which created by ‘-w’ option.

 

 

 

This is used to configure sample packet except the 68 byte default value. The 68 byte is

 

appropriate value for IP, ICMP, TCP and UDP, but it can truncate protocol information of

-sSNAPLEN

Name server or NFS packets. If sample size is long, the system should take more time to

inspect and packets can be dropped for small buffer size. On the contrary, if the sample

 

 

size is small, information can be leaked as the amount. Therefore, user should adjust the

 

size as header size of protocol.

 

 

 

Display the selected packets by conditional expression as the intended type.

 

rpc (Remote Procedure Call)

-TTYPE

rtp (Real-time Transport Protocol)

rtcp (Real-time Transport Control Protocal)

 

 

vat (Visual Audio Tool)

 

wb (distributed White Board)

 

 

EXPRESSION

Conditional expression

 

 

Tab. 7.4 Options for Packet Dump

176

A50010-Y3-C150-2-7619

Page 176
Image 176
Siemens S323, S223 Tab .4 shows the options for packet dump, Tab .4 Options for Packet Dump 176 A50010-Y3-C150-2-7619