TCPDUMP2XPLOT(1)

💖 TCPDUMP2XPLOT 💖

okay bestie, so this is the manual page for tcpdump2xplot, a General Commands Manual situation, and it's giving ✨packet-plotting✨ realness. Let's get into it.

✨ NAME ✨

tcpdump2xplot — converts tcpdump output to xplot input for analysis 💅

🌸 SYNOPSIS 🌸

tcpdump2xplot [-?] [-c] [-help] [-list[filename]] [-plot[filename]] [-q]
              [-r] [-s] [-t] [-w]

🦋 DESCRIPTION 🦋

So tcpdump2xplot takes the output of

tcpdump -tt -S ...

and plots it in terms of sequence-number versus time, with other info displayed (e.g., the TCP window, acks, etc.). It's literally the glow-up your raw tcpdump dump has been waiting for, no cap. 📈✨

🎀 OPTIONS 🎀

• -?, -help — prints a help message. super simple, super iconic 🫶
• -c — ``cumulative'', adds all the data coming from a server. like, ALL of it. collecting everything bestie 💖
• -list[filename] — prints the list of generated plot files to filename. the receipts, if you will 👑
• -plot[filename] — plots the packets from filename. the filename may be built out of a hostname and port number, e.g.: abc.def.com:1234. The default is

fromhost:fromport-tohost:toport.xplot

where fromhost, fromport, thost, toport are extracted as conversations from the tcpdump data. it's giving auto-naming main character energy 💅

• -q — means "quiet" — no visible output. shhh. nothing to see here. very demure 🙈
• -r — means use relative sequence numbers. numbers but make them relative 🔢
• -s — means break up conversations on TCP syns. splitting the convo at the syn, so dramatic 💀
• -t — convert time to decimal number of seconds. time but in decimals, cute 🕐
• -w — plots the TCP window. let's see that window bestie 🪟✨

⭐ EXAMPLES ⭐

okay so... this section is literally empty in the original 😭 no examples. a blank canvas. an empty notebook. the author simply said "you got this" and dipped. anyway! 🎀

🌈 SEE ALSO 🌈

• tcpdump(1)
• xplot.org(1)

go read those too, iykyk 📚✨

💀 BUGS 💀

tcpdump2xplot may not deal properly with output from tcpdump that is not TCP. Either filter to only tcp or be careful.

bestie. listen. if it's not TCP, this thing might get confused 😭 so either filter to only tcp or be careful, fr fr. not a vibe when it breaks.

🧚 HISTORY 🧚

The tcpdump2xplot has been contributed by xplot.org users. Thanks to Garret Wollman for contributing the original tcpdump2xplot.pl script and thanks to Eric Prud'hommeaux (@ w3.org) for making http://www.w3.org/pub/WWW/config/tcpdump2xplot.pl available, a much improved version. The one included here is a slightly improved version of Eric's.

like, it's a whole collaborative slay — Garret started it, Eric leveled it up, and the version you're holding is a slightly improved version of Eric's. ate and left no crumbs 🫶🔥

and that's the whole page, bestie!! this lil legend comes from Debian, dated 27 January 1999 💖 so iconic, so vintage, so periodt. mwah 💋✨