summaryrefslogtreecommitdiff
path: root/docs/manpages/log2pcap.1
diff options
context:
space:
mode:
authorGerald Carter <jerry@samba.org>2003-09-09 02:58:53 +0000
committerGerald Carter <jerry@samba.org>2003-09-09 02:58:53 +0000
commit99bde6889d3d8b7a9e950c86c30e82662e1dacdd (patch)
treebb7d34722e3b2b98ae7e36c11f4e7e4d4538b6fb /docs/manpages/log2pcap.1
parenta50367ee119d0acf1bcaaf93f8c6fcc8fa68c999 (diff)
downloadsamba-99bde6889d3d8b7a9e950c86c30e82662e1dacdd.tar.gz
samba-99bde6889d3d8b7a9e950c86c30e82662e1dacdd.tar.bz2
samba-99bde6889d3d8b7a9e950c86c30e82662e1dacdd.zip
syncing files from 3.0 into HEAD again
(This used to be commit bca0bba209255d0effbae6a3d3b6d298f0952c3a)
Diffstat (limited to 'docs/manpages/log2pcap.1')
-rw-r--r--docs/manpages/log2pcap.1116
1 files changed, 116 insertions, 0 deletions
diff --git a/docs/manpages/log2pcap.1 b/docs/manpages/log2pcap.1
new file mode 100644
index 0000000000..60df066260
--- /dev/null
+++ b/docs/manpages/log2pcap.1
@@ -0,0 +1,116 @@
+.\"Generated by db2man.xsl. Don't modify this, modify the source.
+.de Sh \" Subsection
+.br
+.if t .Sp
+.ne 5
+.PP
+\fB\\$1\fR
+.PP
+..
+.de Sp \" Vertical space (when we can't use .PP)
+.if t .sp .5v
+.if n .sp
+..
+.de Ip \" List item
+.br
+.ie \\n(.$>=3 .ne \\$3
+.el .ne 3
+.IP "\\$1" \\$2
+..
+.TH "LOG2PCAP" 1 "" "" ""
+.SH NAME
+log2pcap \- Extract network traces from Samba log files
+.SH "SYNOPSIS"
+
+.nf
+\fBlog2pcap\fR [-h] [-q] [logfile] [pcap_file]
+.fi
+
+.SH "DESCRIPTION"
+
+.PP
+This tool is part of the \fBSamba\fR(7) suite\&.
+
+.PP
+\fBlog2pcap\fR reads in a samba log file and generates a pcap file (readable by most sniffers, such as ethereal or tcpdump) based on the packet dumps in the log file\&.
+
+.PP
+The log file must have a \fIlog level\fR of at least \fB5\fR to get the SMB header/parameters right, \fB10\fR to get the first 512 data bytes of the packet and \fB50\fR to get the whole packet\&.
+
+.SH "OPTIONS"
+
+.TP
+-h
+If this parameter is specified the output file will be a hex dump, in a format that is readable by the text2pcap utility\&.
+
+
+.TP
+-q
+Be quiet\&. No warning messages about missing or incomplete data will be given\&.
+
+
+.TP
+logfile
+Samba log file\&. log2pcap will try to read the log from stdin if the log file is not specified\&.
+
+
+.TP
+pcap_file
+Name of the output file to write the pcap (or hexdump) data to\&. If this argument is not specified, output data will be written to stdout\&.
+
+
+.TP
+-h|--help
+Print a summary of command line options\&.
+
+
+.SH "EXAMPLES"
+
+.PP
+Extract all network traffic from all samba log files:
+
+.PP
+
+.nf
+
+ $ cat /var/log/* | log2pcap > trace\&.pcap
+ .fi
+
+
+.PP
+Convert to pcap using text2pcap:
+
+.PP
+
+.nf
+
+ $ log2pcap -h samba\&.log | text2pcap -T 139,139 - trace\&.pcap
+ .fi
+
+
+.SH "VERSION"
+
+.PP
+This man page is correct for version 3\&.0 of the Samba suite\&.
+
+.SH "BUGS"
+
+.PP
+Only SMB data is extracted from the samba logs, no LDAP, NetBIOS lookup or other data\&.
+
+.PP
+The generated TCP and IP headers don't contain a valid checksum\&.
+
+.SH "SEE ALSO"
+
+.PP
+\fBtext2pcap\fR(1), \fBethereal\fR(1)
+
+.SH "AUTHOR"
+
+.PP
+The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&.
+
+.PP
+This manpage was written by Jelmer Vernooij\&.
+