Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
UDPDUMP(1)		The Wireshark Network Analyzer		    UDPDUMP(1)

NAME
       udpdump - Provide an UDP	receiver that gets packets from	network
       devices (like Aruba routers) and	exports	them in	PCAP format.

SYNOPSIS
       udpdump [ --help	] [ --version ]	[ --extcap-interfaces ]
       [ --extcap-dlts ] [ --extcap-interface=<interface> ]
       [ --extcap-config ] [ --capture ] [ --fifo=<path	to file	or pipe> ]
       [ --port=<port> ] [ --payload=<type> ]

DESCRIPTION
       udpdump is a extcap tool	that provides an UDP receiver that listens for
       exported	datagrams coming from any source (like Aruba routers) and
       exports them in PCAP format. This provides the user two basic
       functionalities:	the first one is to have a listener that prevents the
       localhost to send back an ICMP port-unreachable packet. The second one
       is to strip out the lower layers	(layer 2, IP, UDP) that	are useless
       (are used just as export	vector). The format of the exported datagrams
       are EXPORTED_PDU, as specified in
       https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob;f=epan/exported_pdu.h;hb=refs/heads/master

OPTIONS
       --help
	   Print program arguments.

       --version
	   Print program version.

       --extcap-interfaces
	   List	available interfaces.

       --extcap-interface=<interface>
	   Use specified interfaces.

       --extcap-dlts
	   List	DLTs of	specified interface.

       --extcap-config
	   List	configuration options of specified interface.

       --capture
	   Start capturing from	specified interface save saved it in place
	   specified by	--fifo.

       --fifo=<path to file or pipe>
	   Save	captured packet	to file	or send	it through pipe.

       --port=<port>
	   Set the listerner port. Port	5555 is	the default.

       --payload=<type>
	   Set the payload of the exported PDU.	Default: data.

EXAMPLES
       To see program arguments:

	   udpdump --help

       To see program version:

	   udpdump --version

       To see interfaces:

	   udpdump --extcap-interfaces

	 Example output:
	   interface {value=udpdump}{display=UDP Listener remote capture}

       To see interface	DLTs:

	   udpdump --extcap-interface=udpdump --extcap-dlts

	 Example output:
	   dlt {number=252}{name=udpdump}{display=Exported PDUs}

       To see interface	configuration options:

	   udpdump --extcap-interface=udpdump --extcap-config

	 Example output:
	   arg {number=0}{call=--port}{display=Listen port}{type=unsigned}{range=1,65535}{default=5555}{tooltip=The port the receiver listens on}

       To capture:

	   udpdump --extcap-interface=randpkt --fifo=/tmp/randpkt.pcapng --capture

       NOTE: To	stop capturing CTRL+C/kill/terminate application.

SEE ALSO
       wireshark(1), tshark(1),	dumpcap(1), extcap(4)

NOTES
       udpdump is part of the Wireshark	distribution.  The latest version of
       Wireshark can be	found at <https://www.wireshark.org>.

       HTML versions of	the Wireshark project man pages	are available at:
       <https://www.wireshark.org/docs/man-pages>.

AUTHORS
	 Original Author
	 ---------------
	 Dario Lombardo		    <lomato[AT]gmail.com>

3.2.6				  2020-08-12			    UDPDUMP(1)

NAME | SYNOPSIS | DESCRIPTION | OPTIONS | EXAMPLES | SEE ALSO | NOTES | AUTHORS

Want to link to this manual page? Use this URL:
<https://www.freebsd.org/cgi/man.cgi?query=udpdump&sektion=1&manpath=FreeBSD+12.2-RELEASE+and+Ports>

home | help