pcapip(1)

pcapip1

Filter a pcap for ip addresses

Usage

FCpcapipF [0] [OPTIONS] ...

Overview

pcapip filters an input pcap file based on a file containing IP addresses to be matched.

Options

FC-i F[0]interface

Input interface to read packets from.

FC-r F[0]pcap file

Dump file to read packets from.

FC-w F[0]pcap file

Dump file to write filtered packets to.

FC-f F[0]expression

BPF expression which selects packets to be filtered.

FC-s F[0]snaplen

Capture snaplen bytes of data from each packet.

FC-pF[0]

Disable promiscuous mode sniffing.

Options

FC-l F[0]file

File containing list of IP addresses, one per line.

Releases

9 releases since Debian 5.0 (Lenny); the text changed 3 times.

  1. 5.0
  2. 6.0–11
  3. 12
  4. 13

From pcaputils 0.8-2 in Debian 13 (Trixie). Parsed by carta from the page's man source.