pcapip(1)

📦
version 0.8 · 5 versions
, in debian bookworm, ubuntu jammy

💖 pcapip — bestie edition 💖

okay so this is pcapip, section 1 of the manual, and she is literally the friend who filters your pcap by IP address. no cap. 🎀

✨ NAME ✨

pcapip — filter a pcap for IP addresses 🦋

🌸 SYNOPSIS 🌸

pcapip [OPTIONS]...

that's it. that's the whole vibe. [OPTIONS]... and honestly the three dots are doing a lot of heavy lifting but we love her. 💅

💜 DESCRIPTION 💜

okay so here's the tea, bestie: pcapip filters an input pcap file based on a file containing IP addresses to be matched. 🫶

like. you hand her a pcap, you hand her a list of IPs, and she's like "say less" and gives you back only the packets that match. main character energy fr fr. 👑

🧚 PCAPNET OPTIONS 🧚

these are the packet-capture-y options, iykyk. 🌈

  • -i interface — the input interface to read packets from. pick your interface, babe. 🍓
  • -r pcap file — the dump file to read packets from. this is your "read from this file instead of the wire" moment. 📖
  • -w pcap file — the dump file to write filtered packets to. the survivors go here. 💀➡️💖
  • -f expression — the BPF expression which selects packets to be filtered. give her a filter expression and she will use it. ✨
  • -s snaplen — capture snaplen bytes of data from each packet. yes, exactly that many. not more, not fewer. 🎯
  • -p — disable promiscuous mode sniffing. she's being modest now, okay?? 🙈

🎀 PROGRAM OPTIONS 🎀

  • -l file — file containing list of IP addresses, one per line. yes bestie, ONE. PER. LINE. do not put two on a line, i am begging you. 😭
ngl, the whole thing is just: read packets from somewhere, match them against your IP list, write the keepers somewhere. iconic behaviour. ⭐

and that's the page!! 🦋 written by the pcapip girlies, version 1, dated 26 December 2021. periodt. 💅✨

📦 where this page comes from