This is automatically generated documentation. Edit after the "COMMENTS" heading; changes to the main body will be lost.
FromCapDump -- Click element; reads packets from a 'cap' output file
FromCapDump(FILENAME [, KEYWORDS])
Ports: no inputs, 1 output
Package: analysis (core)
Reads TCP packet descriptors from a file produced by Mark Allman's 'cap' tool and emits the corresponding TCP packets. Here's an example 'cap' file:
SND 0 INF - cap v2.13 SYN > 1046102982.856142 0 0 40 0 SYN < 1046102982.931832 0 0 40 0 DAT > 1046102982.931941 1 1 1500 1460 ACK < 1046102983.156387 1 1 40 0 DAT > 1046102983.156531 2 2 1500 1460 ... DAT > 1046102996.137294 5068 5000 1500 1460 FIN ACK < 1046102996.215164 5068 5000 40 0 FIN
ACK lines have the following fields: packet type,
direction, timestamp (in seconds past the epoch), unique packet number, packet
sequence number, packet IP length, payload length, and optional flags.
The file may be compressed with gzip(1) or bzip2(1); FromCapDump will
run zcat(1) or bzcat(1) to uncompress it.
FromCapDump reads from the file named FILENAME unless FILENAME is a
single dash `
-', in which case it reads from the standard input. It will
not uncompress the standard input, however.
Output packets have timestamp, aggregate, paint, and packet number
annotations. The paint annotation is 0 for data packets and 1 for
acknowledgements. The first packet number annotation equals the unique packet
number; the second equals the packet sequence number.
Keyword arguments are:
active' handler is written). Default is true.
sampling_probhandler to find out the actual probability. If MULTIPACKET is true, then the sampling probability applies separately to the multiple packets generated per record.
188.8.131.52 1 184.108.40.206 2.
Packets generated by FromCapDump always have IP version 4 and a correct IP header length. The rest of the packet data is zero or garbage, unless set by the dump. Generated packets will usually have short lengths, but the extra header length annotations are set correctly. FromCapDump is a notifier signal, active when the element is active and the dump contains more packets.
Generated by 'click-elem2man' from '../elements/analysis/fromcapdump.hh' on 24/May/2007.