pcaputils

pcaputils includes the following libpcap-based utilities: - pcapip: filters an input pcap file based on a file containing IP addresses - pcappick: picks specific frames out of a pcap by number - pcapuc: prints unique src IPs, dst IPs, or {src, dst} IP pairs witnessed - pcapdump: a dedicated packet capture utility similar to dumpcap, but with these features: * logs packet dump and drop rates * can run as a daemon * can dynamically reload its configuration without dropping packets * can be signalled to immediately rotate its capture output file * can partition its output based on time intervals (e.g., start of hour or start of day) * can strip application data from the trace file (output headers only) * can sample the packet stream (e.g., only dump every 1 in 10 or 1 in 100 packets)