carta
tcpcapinfo(1)

tcpcapinfo1

Pcap file dissector for debugging broken pcap files

Usage

tcpcapinfo [OPTION] ... <pcap_file(s)>

Overview

tcpcapinfo is a tool for decoding the structure of a pcap(3) file with a focus on finding broken pcap files and determining how two related pcap files might differ.

tcpcapinfo will first print out the pcap_file_header_t in human readable form followed by a per-packet summary including the pcap_pkthdr_t and simple checksum value of the packet.

Options

-d, --dbug=number

Enable debugging output. Range: 0 to 5. Default: 0.

If configured with --enable-debug, then you can specify a verbosity level for debugging output. Higher numbers increase verbosity.

-V, --version

Print version information.

-H, --help

Display usage information and exit.

--more-help

Pass the extended usage information through a pager.

Exit status

One of the following exit values will be returned:

0 (EXIT_SUCCESS)

Successful program execution.

1 (EXIT_FAILURE)

The operation failed or the command syntax was not valid.

70 (EX_SOFTWARE)

libopts had an internal operational error. Please report it to <[email protected]>. Thank you.

Notes

This manual page was generated from the tcpcapinfo option definitions.

History

  • Arch Linux 2026-11-01: the text shown here
  • Debian 13 (Trixie)
  • Debian 12 (Bookworm)
  • Debian 11 (Bullseye)
  • Debian 10 (Buster)

-! until Debian 13 (Trixie).

Authors

Copyright 2000-2012 Aaron Turner

Copyright 2013 Fred Klassen - AppNeta by Broadcom

For support please use the <[email protected]> mailing list.

The latest version of this software is always available from: <http://tcpreplay.appneta.com/>

Bugs

Please send bug reports to: <[email protected]>

From tcpreplay 4.6.1-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.