pcapdump -write [<interface(s)>] [-filename=<String>]
Write the captured packets to disk.
pcapdump -wipe
Remove all captured packets from memory.
pcapdump -cleanup
Remove all captured packets, release capture mode and delete all written capture files from disk.
Options
-cleanup
Remove all captured packets, release capture mode and delete
all written capture files from disk.
-count=<value>
Number of packets to capture.
-destport=<0...65535>
Destination TCP/UDP port filter.
-eth=<Ethernet Address>
Ethernet address filter.
-ethdest=<Ethernet Address>
Ethernet destination address filter.
-ethsrc=<Ethernet Address>
Ethernet source address filter.
-filename=<String>
Filename for capture file.
-icmp
ICMP filter.
-ip=<IP4 Address>
IP address filter.
-ipdest=<IP4 Address>
Destination IP address filter.
-ipsrc=<IP4 Address>
Source IP address filter.
-out
Realtime packet brief dumped to console.
-out-nocap
Unbuffered (not stored in memory) realtime packet brief
dumped to console.
-port=<0...65535>
TCP/UDP port filter.
-promisc
Set iface in promiscuous mode.
-proto=<0...255>
IP protocol filter.
-show
Show a captured packets brief.
-size=<value>
Size (kb) of buffer to store captured packets in memory
(default 512kb).
-snaplen=<value>
Maximum length of each packet to capture.
-srcport=<0...65535>
Source TCP/UDP port filter.
-start
Start capture.
-status
Show capture status.
2.2.50. pcapdump
Chapter 2. Command Reference
59
