pcappick(1)

📦
version 0.8 · 5 versions
, in debian bookworm, ubuntu jammy

💖 pcappick(1) 💖

okay bestie, so this is a little cutie from the pcappick family — a Unix manual page, no cap. she reads a pcap file and pulls out one specific frame. one. singular. main character frame. periodt. 🎀

✨ NAME ✨

pcappick — pick specific frames out of a pcap file by number 🦋

✨ SYNOPSIS ✨

pcappick [OPTIONS]...

✨ DESCRIPTION ✨

so here's the tea 💅 — pcappick reads an input pcap file and picks a specific frame to output. that's it. that's the whole vibe. it's giving "surgical extraction, but make it packet capture." lowkey iconic, honestly. 🌸

✨ PCAPNET OPTIONS ✨

these are the pcapnet-flavored ones, bestie, and they go crazy:

  • -i interface — input interface to read packets from. pick your fave network interface and let her sniff. 👑
  • -r pcap file — dump file to read packets from. yes queen, read it straight off disk. 🍓
  • -w pcap file — dump file to write filtered packets to. the packets that survived the filter go here. slay. ✨
  • -f expression — BPF expression which selects packets to be filtered. it's the bouncer at the door, fr fr. 🔥
  • -s snaplen — capture snaplen bytes of data from each packet. how much of each packet do we keep? exactly this many bytes, no more. 💜
  • -p — disable promiscuous mode sniffing. no promiscuity today, she's keeping it strictly to her own lane. 🙈

✨ PROGRAM OPTIONS ✨

the one that does the actual picking:

  • -c number — frame number to pick. THE moment. tell her which frame you want and she's gonna deliver it to you on a silver platter. 💅
ngl, the whole tool is basically "give me frame number -c, from here -i or -r, and put it there -w." tiny. adorable. gets the job done. 🌈

and that's a wrap, babe 🫶 — this page is from the pcappick manual, dated 26 December 2021, and she's tagged with her very own source/version line, pcappick(1), just like the original. mwah. 💖✨🎀

📦 where this page comes from