CAPINFO

NAME
SYNOPSIS
DESCRIPTION
SEE ALSO
AUTHORS
AVAILABILITY
BUGS

NAME

capinfo − print statistics about packet capture files

SYNOPSIS

capinfo file ...

DESCRIPTION

capinfo is a tool for displaying statistics about network traffic from files saved with tcpdump(8) or snoop(1M).

For pcap files, capinfo will display the following information:

byte order of the capture file

libpcap version used for packet capture

capture timezone (usually empty)

significant figures of timestamps (usually empty)

snap length: maximum packet size captured

data link type

number of packets and bytes

number of snaplen truncated packets

timestamp of the first and last packets

For snoop files, capinfo will display the following information:

snoop version used for packet capture

data link type

number of packets and bytes

number of snaplen truncated packets

timestamp of the first and last packets

SEE ALSO

tcpreplay(8), tcpdump(8), snoop(1M), editcap(1)

AUTHORS

Matt Bing <mbing@nfr.net> Aaron Turner <aturner@pobox.com>

AVAILABILITY

The current version is available with the tcpreplay package at:

http://www.sourceforge.net/projects/tcpreplay/

BUGS

None known.

Please send bug reports to tcpreplay-users@lists.sourceforge.net.