Exact PCAP Parse
Exact PCAP Parse (exact-pcap-parse
) is a tool used to create ASCII dumps from .pcap
and .expcap
files. It outputs timestamps and packet data in .csv
files.
The following table lists all commands available:
Short | Long | Default | Description |
---|---|---|---|
i | input | (required) | The input `.pcap` file to parse and dump. |
c | csv | (required) | The `.csv` file to write out the dumped timestamps and packet data. |
v | verbose | (flag) | Enables verbose output printing. |
f | format | (required) | The input file format. Valid values are pcap or expcap . |
o | offset | 0 | Start parsing packets from this packet offset into the input file. |
m | max | -1 (no limit) | Limit the number of packets to parse. |
n | num-chars | 64 | The number of bytes parse and output in the packet data field of the .csv file. |