Re: [tcpdump-workers] Trace conversion.

2004-09-20 Thread Paul Berube
> >> this won't work with icmp though... > > > > That's fine, I'm only interested in IP traffic. > > Presumably you mean "IP traffic other than ICMP traffic", as ICMP > traffic *is* IP traffic. Right, of course it is. Thanks for catching that :) Just as a shot in the dark, changed '-ln ip' to

Re: [tcpdump-workers] Trace conversion.

2004-09-17 Thread Paul Berube
> i think this will accomplish what you want: > # tcpdump -ln ip| awk '{print $1,",", $5}' | sed 's/\.[0-9]*:$//' The output looks fantastic, nearly exactly the format I wanted! One question, though. I see "h.m.s:ms, a.b.c.d.x:", and I'm wondering what the 'x' is? By the frequent occurences o

[tcpdump-workers] Trace conversion.

2004-09-17 Thread Paul Berube
Hi. I think I have a simple problem, but I can't seem to find a simple solution... First, let me say that I know very little in the networks field, that I'm working under Cygwin and Linux, and that I don't have root access. Ok. I have a couple traces in tcpdump format. What I actually need