From e26d7c6659fdd1a2ddd9dcf0d57c95eaa4615f94 Mon Sep 17 00:00:00 2001 From: Juri Date: Wed, 20 Oct 2021 23:21:51 +0200 Subject: [PATCH] ipsumdump, ipaggcreate, ipaggmanip: add page (#6966) --- pages/common/ipaggcreate.md | 16 ++++++++++++++++ pages/common/ipaggmanip.md | 16 ++++++++++++++++ pages/common/ipsumdump.md | 16 ++++++++++++++++ 3 files changed, 48 insertions(+) create mode 100644 pages/common/ipaggcreate.md create mode 100644 pages/common/ipaggmanip.md create mode 100644 pages/common/ipsumdump.md diff --git a/pages/common/ipaggcreate.md b/pages/common/ipaggcreate.md new file mode 100644 index 000000000..caac990e4 --- /dev/null +++ b/pages/common/ipaggcreate.md @@ -0,0 +1,16 @@ +# ipaggcreate + +> Produce aggregate statistics of TCP/IP dumps. +> More information: . + +- Count the number of packets sent from each source address appearing in a pcap file: + +`ipaggcreate --src {{path/to/file.pcap}}` + +- Group and count packets read from a network interface by IP packet length: + +`ipaggcreate --interface {{eth0}} --length` + +- Count the number of bytes sent between each address pair appearing in a pcap file: + +`ipaggcreate --address-pairs --bytes {{path/to/file.pcap}}` diff --git a/pages/common/ipaggmanip.md b/pages/common/ipaggmanip.md new file mode 100644 index 000000000..0c0edfde8 --- /dev/null +++ b/pages/common/ipaggmanip.md @@ -0,0 +1,16 @@ +# ipaggmanip + +> Manipulate aggregate statistics produced by `ipaggcreate`. +> More information: . + +- Combine labels equal in their high-order bits: + +`ipaggmanip --prefix {{16}} {{path/to/file}}` + +- Remove labels with a count smaller than a given number of bytes and output a random sample of such labels: + +`ipaggmanip --cut-smaller {{100}} --cull-labels {{5}} {{path/to/file}}` + +- Replace each label's count with 1 if it is non-zero: + +`ipaggmanip --posterize {{path/to/file}}` diff --git a/pages/common/ipsumdump.md b/pages/common/ipsumdump.md new file mode 100644 index 000000000..8d976519c --- /dev/null +++ b/pages/common/ipsumdump.md @@ -0,0 +1,16 @@ +# ipsumdump + +> Summarise TCP/IP dumps into a human and machine readable ASCII format. +> More information: . + +- Print the source and destination IP addresses of all packets in a pcap file: + +`ipsumdump --src --dst {{path/to/file.pcap}}` + +- Print the timestamps, source address, source port, destination address, destination port and protocol of all packets read from a given network interface: + +`ipsumdump --interface {{eth0}} -tsSdDp` + +- Print the anonymised source address, anonymised destination address, and IP packet length of all packets in a pcap file: + +`ipsumdump --src --dst --length --anonymize {{path/to/file.pcap}}`