DOKK / manpages / debian 11 / pcaputils / pcapip.1.en
pcapip(1) pcapip(1)

pcapip - filter a pcap for IP addresses


pcapip
[OPTIONS]...

pcapip filters an input pcap file based on a file containing IP addresses to be matched.

Input interface to read packets from.
Dump file to read packets from.
Dump file to write filtered packets to.
BPF expression which selects packets to be filtered.
Capture snaplen bytes of data from each packet.
Disable promiscuous mode sniffing.

File containing list of IP addresses, one per line.
9 May 2009