NAME
capinfo − print statistics about packet capture files
SYNOPSIS
capinfo file ...
DESCRIPTION
capinfo is a tool for displaying statistics about network traffic from files saved with tcpdump(8) or snoop(1M).
For pcap files, capinfo will display the following information:
|
byte order of the capture file | ||
|
libpcap version used for packet capture | ||
|
capture timezone (usually empty) | ||
|
significant figures of timestamps (usually empty) | ||
|
snap length: maximum packet size captured | ||
|
data link type | ||
|
number of packets and bytes | ||
|
number of snaplen truncated packets | ||
|
timestamp of the first and last packets |
For snoop files, capinfo will display the following information:
|
snoop version used for packet capture | |
|
data link type | |
|
number of packets and bytes | |
|
number of snaplen truncated packets | |
|
timestamp of the first and last packets |
SEE ALSO
tcpreplay(8), tcpdump(8), snoop(1M), editcap(1)
AUTHORS
Matt Bing <mbing [AT] nfr.net> Aaron Turner <aturner [AT] pobox.com>
AVAILABILITY
The current version is available with the tcpreplay package at:
http://www.sourceforge.net/projects/tcpreplay/
BUGS
None known.
Please send bug reports to tcpreplay-users [AT] lists.net.