pcapuc(1)

💖 pcapuc 💖

okay bestie, welcome to pcapuc — section 1 of the manual, she's a command, she's iconic, and she's about to make your pcap files make sense 🦋

---

✨ NAME ✨

pcapuc — filter a pcap for IP addresses 🎀

---

🌸 SYNOPSIS 🌸

pcapuc [OPTIONS]...

---

🫶 DESCRIPTION 🫶

so like, pcapuc parses an input pcap file and prints unique IP addresses plus the number of packets each IP address appeared in. that's the whole vibe 💅

and optionally?? she can be picky. pcapuc can limit its output to:

• addresses that only appear in the source address field of the IP header
• addresses that only appear in the destination address field
• or sets of IP addresses that appear in the source and destination address fields

choose your fighter, bestie 😭

---

🌈 PCAPNET OPTIONS 🌈

• -i interface — input interface to read packets from 👀
• -r pcap file — dump file to read packets from 📖
• -w pcap file — dump file to write filtered packets to ✍️
• -f expression — BPF expression which selects packets to be filtered 🧚
• -s snaplen — capture snaplen bytes of data from each packet 📏
• -p — disable promiscuous mode sniffing 🙈

---

👑 PROGRAM OPTIONS 👑

• -S — count source IP addresses only
• -D — count destination IP addresses only
• -P — count pairs of IP addresses
• -C — output only the number of unique IP addresses or IP address pairs

---

lowkey reminder bestie: the pcapnet options and the program options are two different little cliques, don't mix them up 💀

---

that's the whole page, no cap ✨ she ate and left no crumbs. this gem is dated 26 December 2021, and it's pcapuc(1) all the way down 💖 periodt 🎀