/usr/share/wireshark/udpdump.html is in libwireshark-data 2.4.5-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 | <?xml version="1.0" ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>udpdump - The Wireshark Network Analyzer 2.4.5</title>
<link rel="stylesheet" href="ws.css" type="text/css" />
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<link rev="made" href="mailto:root@localhost" />
</head>
<body>
<h1 id="NAME">NAME</h1>
<p>udpdump - Provide an UDP receiver that gets packets from network devices (like Aruba routers) and exports them in PCAP format.</p>
<h1 id="SYNOPSIS">SYNOPSIS</h1>
<p><b>udpdump</b> <span style="white-space: nowrap;">[ <b>--help</b> ]</span> <span style="white-space: nowrap;">[ <b>--version</b> ]</span> <span style="white-space: nowrap;">[ <b>--extcap-interfaces</b> ]</span> <span style="white-space: nowrap;">[ <b>--extcap-dlts</b> ]</span> <span style="white-space: nowrap;">[ <b>--extcap-interface</b>=<interface> ]</span> <span style="white-space: nowrap;">[ <b>--extcap-config</b> ]</span> <span style="white-space: nowrap;">[ <b>--capture</b> ]</span> <span style="white-space: nowrap;">[ <b>--fifo</b>=<path to file or pipe> ]</span> <span style="white-space: nowrap;">[ <b>--port</b>=<port> ]</span> <span style="white-space: nowrap;">[ <b>--payload</b>=<type> ]</span></p>
<h1 id="DESCRIPTION">DESCRIPTION</h1>
<p><b>udpdump</b> is a extcap tool that provides an UDP receiver that listens for exported datagrams coming from any source (like Aruba routers) and exports them in PCAP format. This provides the user two basic functionalities: the first one is to have a listener that prevents the localhost to send back an ICMP port-unreachable packet. The second one is to strip out the lower layers (layer 2, IP, UDP) that are useless (are used just as export vector). The format of the exported datagrams are EXPORTED_PDU, as specified in https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob;f=epan/exported_pdu.h;hb=refs/heads/master</p>
<h1 id="OPTIONS">OPTIONS</h1>
<dl>
<dt id="help">--help</dt>
<dd>
<p>Print program arguments.</p>
</dd>
<dt id="version">--version</dt>
<dd>
<p>Print program version.</p>
</dd>
<dt id="extcap-interfaces">--extcap-interfaces</dt>
<dd>
<p>List available interfaces.</p>
</dd>
<dt id="extcap-interface-interface">--extcap-interface=<interface></dt>
<dd>
<p>Use specified interfaces.</p>
</dd>
<dt id="extcap-dlts">--extcap-dlts</dt>
<dd>
<p>List DLTs of specified interface.</p>
</dd>
<dt id="extcap-config">--extcap-config</dt>
<dd>
<p>List configuration options of specified interface.</p>
</dd>
<dt id="capture">--capture</dt>
<dd>
<p>Start capturing from specified interface save saved it in place specified by --fifo.</p>
</dd>
<dt id="fifo-path-to-file-or-pipe">--fifo=<path to file or pipe></dt>
<dd>
<p>Save captured packet to file or send it through pipe.</p>
</dd>
<dt id="port-port">--port=<port></dt>
<dd>
<p>Set the listerner port. Port 5555 is the default.</p>
</dd>
<dt id="payload-type">--payload=<type></dt>
<dd>
<p>Set the payload of the exported PDU. Default: data.</p>
</dd>
</dl>
<h1 id="EXAMPLES">EXAMPLES</h1>
<p>To see program arguments:</p>
<pre><code> udpdump --help</code></pre>
<p>To see program version:</p>
<pre><code> udpdump --version</code></pre>
<p>To see interfaces:</p>
<pre><code> udpdump --extcap-interfaces
Example output:
interface {value=udpdump}{display=UDP Listener remote capture}</code></pre>
<p>To see interface DLTs:</p>
<pre><code> udpdump --extcap-interface=udpdump --extcap-dlts
Example output:
dlt {number=252}{name=udpdump}{display=Exported PDUs}</code></pre>
<p>To see interface configuration options:</p>
<pre><code> udpdump --extcap-interface=udpdump --extcap-config
Example output:
arg {number=0}{call=--port}{display=Listen port}{type=unsigned}{range=1,65535}{default=5555}{tooltip=The port the receiver listens on}</code></pre>
<p>To capture:</p>
<pre><code> udpdump --extcap-interface=randpkt --fifo=/tmp/randpkt.pcapng --capture</code></pre>
<p>NOTE: To stop capturing CTRL+C/kill/terminate application.</p>
<h1 id="SEE-ALSO">SEE ALSO</h1>
<p>wireshark(1), tshark(1), dumpcap(1), extcap(4)</p>
<h1 id="NOTES">NOTES</h1>
<p><b>udpdump</b> is part of the <b>Wireshark</b> distribution. The latest version of <b>Wireshark</b> can be found at <a href="https://www.wireshark.org">https://www.wireshark.org</a>.</p>
<p>HTML versions of the Wireshark project man pages are available at: <a href="https://www.wireshark.org/docs/man-pages">https://www.wireshark.org/docs/man-pages</a>.</p>
<h1 id="AUTHORS">AUTHORS</h1>
<pre><code> Original Author
---------------
Dario Lombardo <lomato[AT]gmail.com></code></pre>
</body>
</html>
|