diff options
Diffstat (limited to '')
| -rw-r--r-- | doc/man_pages/text2pcap.adoc (renamed from doc/text2pcap.adoc) | 34 |
1 files changed, 23 insertions, 11 deletions
diff --git a/doc/text2pcap.adoc b/doc/man_pages/text2pcap.adoc index ab894747..9c2a8195 100644 --- a/doc/text2pcap.adoc +++ b/doc/man_pages/text2pcap.adoc @@ -1,9 +1,9 @@ -include::../docbook/attributes.adoc[] +include::../attributes.adoc[] = text2pcap(1) :doctype: manpage :stylesheet: ws.css :linkcss: -:copycss: ../docbook/{stylesheet} +:copycss: {css_dir}/{stylesheet} == NAME @@ -16,7 +16,7 @@ text2pcap - Generate a capture file from an ASCII hexdump of packets [ *-a* ] [ *-b* 2|8|16|64 ] [ *-D* ] -[ *-e* <l3pid> ] +[ *-e* <ethertype> ] [ *-E* <encapsulation type> ] [ *-F* <file format> ] [ *-i* <proto> ] @@ -57,7 +57,11 @@ hexdumps of application-level data only. The *-F* flag can be used to specify the format in which to write the capture file, *text2pcap -F* provides a list of the available output formats. By default, it writes the packets to __outfile__ in the *pcapng* -file format. +file format. *Text2cap* also supports compression formats, which can +be specified with the *--compress* options. If that option is not given, +the the desired compression method, if any, is deduced from the extension +of __outfile__; e.g. if it has the extension '.gz', then the output file +is compressed to a gzip archive. *Text2pcap* understands a hexdump of the form generated by __od -Ax -tx1 -v__. In other words, each byte is individually displayed, with @@ -203,10 +207,10 @@ supports it (e.g. pcapng), and is also used when generating dummy headers to swap the source and destination addresses and ports as appropriate. -- --e <l3pid>:: +-e <ethertype>:: + -- -Include a dummy Ethernet header before each packet. Specify the L3PID +Include a dummy Ethernet header before each packet. Specify the EtherType for the Ethernet header in hex. Use this option if your dump has Layer 3 header and payload (e.g. IP header), but no Layer 2 encapsulation. Example: __-e 0x806__ to specify an ARP packet. @@ -297,11 +301,11 @@ direction indicators or timestamps after the first byte along with any offsets. + -- Include an EXPORTED_PDU header before each packet. Specify, as a -string, the dissector to be called for the packet (DISSECTOR_NAME tag). +string, the dissector to be called for the packet (DISSECTOR_NAME tag). Use this option if your dump is the payload for a single upper layer protocol (so specifying a link layer type would not work) and you wish -to create a capture file without a full dummy protocol stack. -Automatically sets the link layer type to Wireshark Upper PDU export. +to create a capture file without a full dummy protocol stack. +Automatically sets the link layer type to Wireshark Upper PDU export. Without this option, if the Upper PDU export link layer type (252) is selected the dissector defaults to "data". -- @@ -385,7 +389,7 @@ Print the full version information and exit. -4 <srcip>,<destip>:: + -- -Prepend dummy IP header with specified IPv4 dest and source address. +Prepend dummy IP header with specified IPv4 source and destination addresses. This option should be accompanied by one of the following options: -i, -s, -S, -T, -u Use this option to apply "custom" IP addresses. Example: __-4 10.0.0.1,10.0.0.2__ to use 10.0.0.1 and 10.0.0.2 for all IP packets. @@ -394,13 +398,21 @@ Example: __-4 10.0.0.1,10.0.0.2__ to use 10.0.0.1 and 10.0.0.2 for all IP packet -6 <srcip>,<destip>:: + -- -Prepend dummy IP header with specified IPv6 dest and source address. +Prepend dummy IP header with specified IPv6 source and destination addresses. This option should be accompanied by one of the following options: -i, -s, -S, -T, -u Use this option to apply "custom" IP addresses. Example: __-6 2001:db8::b3ff:fe1e:8329,2001:0db8:85a3::8a2e:0370:7334__ to use 2001:db8::b3ff:fe1e:8329 and 2001:0db8:85a3::8a2e:0370:7334 for all IP packets. -- +--compress <type>:: ++ +-- +Compress the output file using the type compression format. +*--compress* with no argument provides a list of the compression formats supported +for writing. The type given takes precedence over the extension of __outfile__. +-- + include::diagnostic-options.adoc[] == SEE ALSO |