Endace DAG 5.2X, User Manual

Page: 41 / 66

EDM01-33v1 DAG_7.5G4_Card_User_Guide
©2008 Endace Technology Ltd. Confidential - Version 1 - November 2008 37
Dagconvert
dagconvert
is a software utility for converting data to various file formats. Supported formats
are:
File format Description
dag Read ERF records directly from DAG card (input only).
erf ERF (Extensible Record Format) file (input and output).
atm Legacy ATM files (input only).
eth Legacy Ethernet files (input only).
pos Legacy PoS files (input only).
null Produces no input or output.
pcap pcap(3) format file (input or output).
prt ASCII text packet dump (output only).
Data can be input from a file or captured from a DAG card.
dagconvert
can be used for
converting data captured from a DAG card to pcap format. This allows the trace file to be
used with tools that support the pcap file format. Also the reverse is possible, where data can
be converted to ERF format for use in other dag utilities. The following is a list of options
available in
dagconvert
.
Options Description
-A NUM
Set the record alignment of the ERF to NUM bytes (ERF only).
-b EXPRESSION
Specify a tcpdump(1) style BPF expression to be applied to the packets.
-c 0|16|32
Specify the size (in bits) of the frame checksum (FCS) (pcap(3) only).
-d DEVICE
--device DEVICE
Use the DAG device referred to by DEVICE. Supported syntax includes 0,
dag1, and /dev/dag3 to refer to DAG cards, and 0:2, dag1:1, and
/dev/dag2:0 to refer to specific streams on cards.
-f FILTERS
A comma-delimited list of filters to be applied to the data. Supported filters
are:
•
rx
Filter out rx errors (link layer).
•
ds
Filter out ds errors (framing).
•
trunc
Filter out truncated packets.
•
a,b,c,d
Filter on indicated port/interface(s).
-F
Select fixed length output (ERF only).
-G NUM
Set the GMT offset to NUM seconds (pcap(3) only).
-h, -?, --help, --
usage
Display usage (help) information.
-i FILES
Name(s) of the input file(s). If more than one filename is given, the ERF
records from the files will be merged in timestamp order to the output.
-o FILE
Name of the output file.
-r NUM
Rotate the output file after NUM bytes. Add
k
(kilobytes),
m
(megabytes),
g
(gigabytes) and
t
(terabytes) suffixes.
-s NUM
Set the snap length to NUM bytes.
-t NUM
Capture from the DAG card for NUM seconds.
-T atm|dag|erf|eth
|pcap|pos :
erf|pcap|prt
Input and output types. See the DESCRIPTION section above for more
information about the input and output types.
-v, --verbose
Increase output verbosity.
-V, --version
Select variable length output (ERF only). Display version information.
-y <DLT>
This sets the pcap data link type to be used for BPF filtering (-b) and for
pcap output. Previously only one DLT was mapped to each ERF type.
Supported DLT types (case insensitive):
EN10MB: Ethernet
DOCSIS : Ethernet
CHDLC : HDLC PPP_SERIAL : HDLC
MTP2 : HDLC ATM_RFC1483 : ATM, AAL5
SUNATM : ATM, AAL5
Note: Not all options are applicable to all DAG cards.