-
Notifications
You must be signed in to change notification settings - Fork 856
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add --overview and --no-print options to tcpdump #1033
base: master
Are you sure you want to change the base?
Add --overview and --no-print options to tcpdump #1033
Conversation
--overview: that prints an overview of the contents of the capture --no-print: suppress printing of individual packets
…option-master Add --overview and --no-print options
Update CHANGES, fix option numbering
Fix build errors
Thank you for preparing these changes. Please note that this prototype has a few significant issues. To an extent this is caused by trying to retrofit a detailed statistics feature into a code base that is not designed to produce such output. This would be much better done in a separate program that takes a pcap savefile as an input. In particular, please have a look at ipsumdump, which either already implements this type of statistics, or might be much easier to extend for that than tcpdump. |
Hi @infrastation, thank you for looking at this PR and for your feedback. I am currently evaluating ipsumdump to see if it meets our needs and if not, if we could extend it instead. Thank you for your suggestion. |
This PR adds the following command line options to tcpdump.
--overview: to print an overview of the contents of the capture
--no-print: to suppress printing of individual packets (useful with --overview)
The --overview option prints output that looks like the following. It can be used with either a live capture or a capture file (-r option).