2.2.39. pcapdump
pcapdump
Show capture status.
pcapdump -start [<interface(s)>] [-size=<value>] [-snaplen=<value>]
Start capture.
pcapdump -stop [<interface(s)>]
Stop capture.
pcapdump -status
Show capture status.
pcapdump -show [<interface(s)>]
Show a captured packets brief.
pcapdump -write [<interface(s)>] [-filename=<String>]
Write the captured packets to disk.
pcapdump -wipe
Remove all captured packets from memory.
pcapdump -cleanup
Remove all captured packets, release capture mode and delete all written capture files from disk.
Options
-cleanup
-count=<value>
-destport=<0...65535>
-eth=<Ethernet Address>
-ethdest=<Ethernet Address>
-ethsrc=<Ethernet Address>
-filename=<String>
-icmp
-ip=<IP4 Address>
[-count=<value>] [-out] [-out-nocap]
[-eth=<Ethernet Address>] [-ethsrc=<Ethernet Address>]
[-ethdest=<Ethernet Address>] [-ip=<IP4 Address>]
[-ipsrc=<IP4 Address>] [-ipdest=<IP4 Address>]
[-port=<0...65535>] [-srcport=<0...65535>]
[-destport=<0...65535>] [-proto=<0...255>] [-icmp] [-tcp]
[-udp] [-promisc] [-ipversion=<1...15>]
Remove all captured packets, release capture mode
and delete all written capture files from disk.
Number of packets to capture.
Destination TCP/UDP port filter.
Ethernet address filter.
Ethernet destination address filter.
Ethernet source address filter.
Filename for capture file.
ICMP filter.
IP address filter.
52
Chapter 2. Command Reference