NAME

tsh2tcpdump.pl - Convert a single TSH trace to tcpdump text format

SYNOPSIS

 perl tsh2tcpdump.pl [-v] TRACE [TCPDUMP_FILENAME]

DESCRIPTION

tsh2tcpdump.pl is a simple application based on Net::Traces::TSH: It converts the binary TSH TRACE to tcpdump text format, stored in TCPDUMP_FILENAME. If TCPDUMP_FILENAME is ommited, tsh2tcpdump will store the result of the conversion to TRACE.tcpdump. The text output is similar to what tcpdump with options -n and -S would have produced.

Use the -v option to display version and progress information.

Example

 % perl tsh2tcpdump.pl -v BWY-1073954865-1.tsh
 Using Net::Traces::TSH version 0.11
 Processing BWY-1073954865-1.tsh...
 TCP activity stored in text format in BWY-1073954865-1.tsh.tcpdump

 % more BWY-1073954865-1.tsh.tcpdump
 0.000000000 10.0.0.1.1433 > 10.0.0.2.5197: F 728858043:728858043(0) ack 624693062 win 65353
 0.000025988 10.0.0.5.9966 > 10.0.0.6.43327: . 3646667771:3646669219(1448) ack 2533461177 win 5792
 0.000113010 10.0.0.7.2209 > 10.0.0.8.3661: P 3522801148:3522802516(1368) ack 573261995 win 62960
 0.000190020 10.0.0.7.2209 > 10.0.0.8.3661: P 3522802516:3522803196(680) ack 573261995 win 62960
 0.000230074 10.0.0.5.9966 > 10.0.0.6.43327: . 3646669219:3646670667(1448) ack 2533461177 win 5792
 0.000354052 10.0.0.9.2549 > 10.0.0.10.1214: P 2202546388:2202547056(668) ack 185596712 win 64576
 0.000394106 10.0.0.11.3046 > 10.0.0.12.6881: . ack 810894344 win 17520
 0.000396013 10.0.0.5.9966 > 10.0.0.6.43327: . 3646670667:3646672115(1448) ack 2533461177 win 5792
 0.000498056 10.0.0.13.3034 > 10.0.0.14.26212: . ack 1444918162 win 64240
 [...]

DEPENDENCIES

Getopt::Std, Net::Traces::TSH

VERSION

This is tsh2tcpdump.pl version 0.02.

AUTHOR

Kostas Pentikousis, kostas@cpan.org

COPYRIGHT AND LICENSE

Copyright 2004 by Kostas Pentikousis. All Rights Reserved.

This program is free software with ABSOLUTELY NO WARRANTY. You can redistribute it and/or modify it under the same terms as Perl itself.