summaryrefslogtreecommitdiff
path: root/docs/htmldocs/log2pcap.1.html
diff options
context:
space:
mode:
Diffstat (limited to 'docs/htmldocs/log2pcap.1.html')
-rw-r--r--docs/htmldocs/log2pcap.1.html29
1 files changed, 29 insertions, 0 deletions
diff --git a/docs/htmldocs/log2pcap.1.html b/docs/htmldocs/log2pcap.1.html
new file mode 100644
index 0000000000..c84bbdbb4d
--- /dev/null
+++ b/docs/htmldocs/log2pcap.1.html
@@ -0,0 +1,29 @@
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>log2pcap</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="log2pcap.1"></a><div class="titlepage"><div></div><div></div></div><div class="refnamediv"><h2>Name</h2><p>log2pcap &#8212; Extract network traces from Samba log files</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><tt class="command">log2pcap</tt> [-h] [-q] [logfile] [pcap_file]</p></div></div><div class="refsect1" lang="en"><h2>DESCRIPTION</h2><p>This tool is part of the <a href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a> suite.</p><p><b class="command">log2pcap</b> reads in a
+ samba log file and generates a pcap file (readable
+ by most sniffers, such as ethereal or tcpdump) based on the packet
+ dumps in the log file.</p><p>The log file must have a <i class="parameter"><tt>log level</tt></i>
+ of at least <tt class="constant">5</tt> to get the SMB header/parameters
+ right, <tt class="constant">10</tt> to get the first 512 data bytes of the
+ packet and <tt class="constant">50</tt> to get the whole packet.
+ </p></div><div class="refsect1" lang="en"><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-h</span></dt><dd><p>If this parameter is
+ specified the output file will be a
+ hex dump, in a format that is readable
+ by the <span class="application">text2pcap</span> utility.</p></dd><dt><span class="term">-q</span></dt><dd><p>Be quiet. No warning messages about missing
+ or incomplete data will be given.</p></dd><dt><span class="term">logfile</span></dt><dd><p>
+ Samba log file. log2pcap will try to read the log from stdin
+ if the log file is not specified.
+ </p></dd><dt><span class="term">pcap_file</span></dt><dd><p>
+ Name of the output file to write the pcap (or hexdump) data to.
+ If this argument is not specified, output data will be written
+ to stdout.
+ </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.
+</p></dd></dl></div></div><div class="refsect1" lang="en"><h2>EXAMPLES</h2><p>Extract all network traffic from all samba log files:</p><pre class="screen">
+ <tt class="prompt">$</tt> cat /var/log/* | log2pcap &gt; trace.pcap
+ </pre><p>Convert to pcap using text2pcap:</p><pre class="screen">
+ <tt class="prompt">$</tt> log2pcap -h samba.log | text2pcap -T 139,139 - trace.pcap
+ </pre></div><div class="refsect1" lang="en"><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><h2>BUGS</h2><p>Only SMB data is extracted from the samba logs, no LDAP,
+ NetBIOS lookup or other data.</p><p>The generated TCP and IP headers don't contain a valid
+ checksum.</p></div><div class="refsect1" lang="en"><h2>SEE ALSO</h2><p><a href="text2pcap.1.html"><span class="citerefentry"><span class="refentrytitle">text2pcap</span>(1)</span></a>, <a href="ethereal.1.html"><span class="citerefentry"><span class="refentrytitle">ethereal</span>(1)</span></a></p></div><div class="refsect1" lang="en"><h2>AUTHOR</h2><p>The original Samba software and related utilities
+ were created by Andrew Tridgell. Samba is now developed
+ by the Samba Team as an Open Source project similar
+ to the way the Linux kernel is developed.</p><p>This manpage was written by Jelmer Vernooij.</p></div></div></body></html>