sc_ttlexp1
Dump source addresses from icmp ttl expired messages in warts files
Usage
sc_ttlexp [-O
options]
[file ...]
Overview
The sc_ttlexp utility provides a dump of source IP addresses contained trace and tracelb records in warts(5) files.
The options are as follows:
-
-? -
prints a list of command line options and a synopsis of each.
-
-O option -
allows the behavior of
sc_ttlexpto be further tailored. The current choices for this option are:-
nodst:do not dump source address of a TTL expired message if it matches the destination address probed. -
noreserved:do not dump source address of a TTL expired message if the address is a reserved address.
-
Examples
Given two warts(5) files named file1.warts and file2.warts, the following dumps all source addresses that sent TTL expired messages:
sc_ttlexp file1.warts file2.warts
Given a compressed warts file named file3.warts.bz2, the following dumps all source addresses that sent TTL expired messages, skipping those that were only observed in TTL expired messages from the destination probed:
bzcat file3.warts.bz2 | sc_ttlexp -O nodst
Releases
Unchanged in 4 releases since Debian 10 (Buster).