Endace DAG 9.2X2, User Manual

Page: 51 / 86

EDM01-36v10 DAG_9.2X2_Card_User_Guide - Using your DAG card
©2010 - 2012 Endace Technology Ltd. Confidential - Version 10 - May 2012
45
dagconvert options
The following is a list of options available in
dagconvert
.
Note:
Not all options are applicable to all DAG cards.
Options Description
-a <api>
Specify which API to use when capturing from DAG cards.
•
0: DAG 2.4 legacy API [dag_offset()]
•
1: DAG 2.5 API [dag_advance_stream()](default value)
•
2: DAG 2.5 API [dag_rx_stream_next_record()]
-A <int>
Set the record alignment of the ERF to NUM bytes (ERF only).
-b <BPF>
Specify a tcpdump(1) style BPF (Berkeley Packet Filter) expression to be applied to the
packets.
-c 0|16|32
Specify the size (in bits) of the frame checksum (FCS) (pcap(3) only).
-D
Perform defragmentation if possible.
-d <device>
Use the DAG device referred to by DEVICE. Supported syntax includes 0, dag1, and
/dev/dag3 to refer to DAG cards, and 0:2, dag1:1, and /dev/dag2:0 to refer to specific
streams on cards.
-E
Strip any extension headers if they exists.
-e <type>
Select the conversion erf type (ERF only).
•
POS (ETH -> POS)
•
ipv4/ipv6 (ETH -> ipv4/ipv6)
•
ETH (ipv4/ipv6-> ETH)
-F
Select fixed length output (ERF only).
-f <list>
A comma-delimited list of filters to be applied to the data. Supported filters are:
•
rx Filter out rx errors (link layer).
•
ds
Filter out ds errors (framing).
•
trunc Filter out truncated packets.
•
a,b,c,d Filter on indicated port/interface(s).
--fnum
Maximum Files before the counter overlaps.
-g,
--sonet-align
Sonet frame alignment for Bit-Level capture files.
-G
Set the GMT offset to NUM seconds (pcap(3) only).
-h, -?, --help,
--usage
Display usage (help) information.
-I
Ignore the first incomplete assemble (in defragmentation).
-i <filename>
Name(s) of the input file(s). If more than one filename is given, the ERF records from the
files will be merged in timestamp order to the output.
To select multiple input files, use this option repeatedly.
The redirection operator '<' can also be used for single file input, provided the input is not of
PCAP format.
-o <filename>
Name of the output file.
-p 0|1|2|3
Specifies the interface ID to write into output ERF records
-R
Rename defragmented ERF types, if possible (eg, POS/ATM).
-r N[k|m|g|t]
Rotate the output file after
N
bytes. Add
k
(kilobytes),
m
(megabytes),
g
(gigabytes) and
t
(terabytes) suffixes.
-s <snaplength>
Set the snap length to NUM bytes.
-T <input format>
: <output format>
Input and output types. See the section above for more information about the input and
output types.
-t <seconds>
Capture from the DAG card for the defined number of seconds.
-U
Use temporary extension name to indicate current output file. Used with the -r command.
Once a new current outfile is created change the file name extension name to .erf .
-u 4|6
Specify the output ERF type IPv4/IPv6 for DLT_RAW when converting pcap DLT_RAW to
ERF..