Displaying 2 results from an estimated 2 matches for "tcpslice".
Did you mean:
pc_slice
2003 Apr 14
0
[tcpdump-workers] TCPDump is truncating output file if italready exists..
...would do that, and, given that function, one
> could probably add a new command-line flag to get tcpdump to append to
> a capture file rather than truncating and overwriting it.
That would be very handy, but I'm not going to hold my breath waiting for
it. In the meantime, try the "tcpslice" utility included with tcpdump to
split and merge raw packet capture files.
-- Steve Bonds
1998 Aug 17
0
IP Filters and Firewalls:Summary of Source Info
...0.31 too)
http://cheops.anu.edu.au/~avalon/
But one of the best monitoring tools is tcpdump, its
current version being 3.4, and you need libpcap-0.x, to
work. Both of the packages are ready to download from:
ftp://ftp.ee.lbl.gov/tcpdump.tar.Z
ftp://ftp.ee.lbl.gov/libpcap.tar.Z
ftp://ftp.ee.lbl.gov/tcpslice.tar.Z
The last one is for reading files with live snapshots
from your net, these written by tcpdump, at later times,
when needed.
WARN: untar libpcap where your *current untarred* tcpdump
files lie, in other words under the tcpdump-3.4 directory!
There are other very intersting papers around the...