pcapuc(1)

pcapuc(1)                                                            pcapuc(1)

NAME
       pcapuc - filter a pcap for IP addresses

SYNOPSIS
       pcapuc [OPTIONS]...

DESCRIPTION
       pcapuc parses an input pcap file and prints unique IP addresses and the
       number of packets each IP address appeared in. Optionally,  pcapuc  can
       limit  its  output  to addresses that only appear in the source address
       field of the IP header, addresses that only appear in  the  destination
       address  field,  or  sets of IP addresses that appear in the source and
       destination address fields.

PCAPNET OPTIONS
       -i interface
              Input interface to read packets from.

       -r pcap file
              Dump file to read packets from.

       -w pcap file
              Dump file to write filtered packets to.

       -f expression
              BPF expression which selects packets to be filtered.

       -s snaplen
              Capture snaplen bytes of data from each packet.

       -p     Disable promiscuous mode sniffing.

PROGRAM OPTIONS
       -S     count source IP addresses only

       -D     count destination IP addresses only

       -P     count pairs of IP addresses

       -C     output only the number of unique  IP  addresses  or  IP  address
              pairs

                                  9 May 2009                         pcapuc(1)