SC_WARTS2PCAP(1)

sc_warts2pcap 💖

okay so this is sc_warts2pcap(1), from the General Commands Manual section of your friendly neighbourhood man pages, and bestie it is so much more fun than it sounds. it takes the lil packets that got stashed inside warts objects and dumps them into a pcap file. that's the whole vibe. slay.

---

✨ NAME ✨

sc_warts2pcap — write packets included in warts object to a pcap file. 💅

---

✨ SYNOPSIS ✨

sc_warts2pcap [-o outfile] [-s sort] [file ...]

---

🌸 DESCRIPTION 🌸

okay so here's the tea 🫖: sc_warts2pcap gives you the power to extract packets embedded in the tbit, sting, and sniff warts objects and write them out to a pcap file. and because it's a pcap file, tcpdump and wireshark can read it. it's giving ✨interoperability✨. no cap, it's that simple.

the options, one at a time 👑

• -o outfile — this one names your output file. if you don't give an output file at all, everything goes to standard output instead — but only provided that it is not a tty. (so like, don't just run it bare in your terminal and expect magic, bestie. redirect it somewhere. 🙈)
• -o sort — so real talk, this is exactly how the page writes this option down, and the synopsis up top calls it -s sort, and the example below uses -s packet. i'm just reporting the receipts, not fixing them, periodt. 💀 anyway — this one says how the pcap records (packets) get sorted before being written out. by default, no sorting is applied; the packets are grouped as they are in the warts file. if you do ask for packet sorting, the packets get written out in timestamp order.

⚠️ heads up though, and this is important: this operation requires the packets to be read into memory to be sorted, so it will require a corresponding amount of memory to complete. big file, big memory. plan accordingly. 🧠💥

---

🦋 EXAMPLES 🦋

the command:

sc_warts2pcap -o output.pcap file1.warts file2.warts

will read the packet objects from file1.warts, and then file2.warts, and write them to output.pcap. in order, in order, in order. we love a queue. 🎀

the command:

gzcat file1.warts.gz | sc_warts2pcap -s packet >file1.pcap

will read the contents of the uncompressed warts file supplied on stdin, sort the packets by their timestamp, and then write the output to file1.pcap. iconic pipe behaviour, honestly. 🌈

---

🌟 SEE ALSO 🌟

• scamper(1)
• tcpdump(1)

---

💜 AUTHORS 💜

sc_warts2pcap was written by Stephen Eichler and Matthew Luckie. kings. 👑

---

and that's the whole page bestie!! this one shipped from Debian and it's dated October 15, 2010 — vintage, but still eating. go forth and pcap responsibly. mwah. 💖✨🎀🦋🌸💅