tracediff(1)

Usage

tracediff [-m maxdiff] firsturi seconduri

Overview

tracediff compares two trace files and prints the details of packets that differ to standard output. This is useful for finding packets that are present in one trace but not another or for finding conversion or snapping errors.

-m maxdiff: stop processing after displaying 'maxdiff' differences

Examples

tracediff -m 10 erf:/traces/orig.erf.gz pcapfile:/traces/convert.pcap.gz

Links

More details about tracediff (and libtrace) can be found at http://www.wand.net.nz/trac/libtrace/wiki/UserDocumentation

Releases

8 releases since Debian 6.0 (Squeeze); the text changed 1 time.

6.0
7–13

libtrace(3) tracemerge(1) Merge one (or more) traces together tracefilter(1) apply a bpf filter to a trace traceconvert(1) convert a trace from one format to another tracestats(1) perform simple analysis on a trace tracesummary(1) output basic summary stats about a trace tracertstats(1) perform simple filter based analysis on a trace tracesplit(1) split traces tracesplit_dir(1) split traces into two directions tracereport(1) produce various reports on a trace (or traceset) tracepktdump(1) output packets in human readable format traceanon(1) anonymise ip addresses of traces tracereplay(1) Replay a trace in trace time from one uri to another traceends(1) summarise traffic done by every endpoint observed in a trace tracetopends(1) reports the endpoints that are responsible for the most traffic in a trace

Referred to by

tracetop(1) show top flows traceanon(1) anonymise ip addresses of traces traceends(1) summarise traffic done by every endpoint observed in a trace tracemerge(1) Merge one (or more) traces together tracesplit(1) split traces tracestats(1) perform simple analysis on a trace tracefilter(1) apply a bpf filter to a trace tracereplay(1) Replay a trace in trace time from one uri to another tracereport(1) produce various reports on a trace (or traceset) traceconvert(1) convert a trace from one format to another tracepktdump(1) output packets in human readable format tracertstats(1) perform simple filter based analysis on a trace tracesummary(1) output basic summary stats about a trace tracetopends(1) reports the endpoints that are responsible for the most traffic in a trace tracesplit_dir(1) split traces into two directions