Reference

pcapip(1)

filter a pcap for IP addresses

NAME

pcapip - filter a pcap for IP addresses

SYNOPSIS

FCpcapipF[0] [OPTIONS]...

DESCRIPTION

pcapip filters an input pcap file based on a file containing IP addresses to be matched.

PCAPNET OPTIONS

FC-i F[0]interface

Input interface to read packets from.

FC-r F[0]pcap file

Dump file to read packets from.

FC-w F[0]pcap file

Dump file to write filtered packets to.

FC-f F[0]expression

BPF expression which selects packets to be filtered.

FC-s F[0]snaplen

Capture snaplen bytes of data from each packet.

FC-pF[0]

Disable promiscuous mode sniffing.

PROGRAM OPTIONS

FC-l F[0]file

File containing list of IP addresses, one per line.

History