pcapuc - filter a pcap for IP addresses
pcapuc parses an input pcap file and prints unique IP addresses and the
number of packets each IP address appeared in. Optionally, pcapuc can
limit its output to addresses that only appear in the source address
field of the IP header, addresses that only appear in the destination
address field, or sets of IP addresses that appear in the source and
destination address fields.
Input interface to read packets from.
-r pcap file
Dump file to read packets from.
-w pcap file
Dump file to write filtered packets to.
BPF expression which selects packets to be filtered.
Capture snaplen bytes of data from each packet.
-p Disable promiscuous mode sniffing.
-S count source IP addresses only
-D count destination IP addresses only
-P count pairs of IP addresses
-C output only the number of unique IP addresses or IP address
9 May 2009 pcapuc(1)