| Junxiao Shi | b99fb2b | 2015-06-19 15:10:11 -0700 | [diff] [blame] | 1 | ndndump |
| 2 | ======= |
| 3 | |
| 4 | Usage |
| 5 | ----- |
| 6 | |
| 7 | :: |
| 8 | |
| 9 | ndndump [-hV] [-i interface] [-r file] [-f filter] [expression] |
| 10 | |
| 11 | Description |
| 12 | ----------- |
| 13 | |
| 14 | :program:`ndndump` is a traffic analysis tool that captures Interest and Data packets on the wire, |
| 15 | and displays brief information about captured packets. |
| 16 | |
| 17 | Currently, :program:`ndndump` is capable of extracting Interest and Data packets from: |
| 18 | |
| 19 | * Ethernet, when bare Interest/Data is transmitted without NDNLP header |
| 20 | * PPP link (e.g., pcap trace from ndnSIM) |
| 21 | * IPv4 UDP unicast tunnel |
| 22 | * IPv4 UDP multicast group |
| 23 | * IPv6 TCP tunnel, when Interest/Data is aligned to the front of a TCP segment |
| 24 | |
| 25 | Options |
| 26 | ------- |
| 27 | |
| 28 | ``-h`` |
| 29 | Print help and exit. |
| 30 | |
| 31 | ``-V`` |
| 32 | Print version and exit. |
| 33 | |
| 34 | ``-i`` |
| 35 | Listen on :option:`interface`. |
| 36 | If unspecified, ndndump searches the system interface list for the lowest numbered, |
| 37 | configured up interface (excluding loopback). |
| 38 | |
| 39 | ``-r`` |
| 40 | Read packets from :option:`file` (which was created with :manpage:`tcpdump(8)` using its -w option). |
| 41 | |
| 42 | ``-v`` |
| 43 | Produce verbose output. |
| 44 | |
| 45 | ``-f`` |
| 46 | Print a packet only if its Name matches the regular expression :option:`filter`. |
| 47 | |
| 48 | ``expression`` |
| 49 | Selects which packets will be analyzed, in :manpage:`pcap-filter(7)` format. |
| 50 | If no :option:`expression` is given, a default expression is implied which can be seen with ``-h`` option. |
| 51 | |
| 52 | Examples |
| 53 | -------- |
| 54 | |
| 55 | Capture on eth1 and print packets containing "ping": |
| 56 | |
| 57 | :: |
| 58 | |
| 59 | ndndump -i eth1 -f '.*ping.*' |