NAME

       pcapuc - filter a pcap for IP addresses

SYNOPSIS

       pcapuc [OPTIONS]...

DESCRIPTION

       pcapuc parses an input pcap file and prints unique IP addresses and the number of packets each IP address
       appeared  in. Optionally, pcapuc can limit its output to addresses that only appear in the source address
       field of the IP header, addresses that only appear in the destination address field, or sets  of  IP  ad‐
       dresses that appear in the source and destination address fields.

PCAPNET OPTIONS

       -i interface
              Input interface to read packets from.

       -r pcap file
              Dump file to read packets from.

       -w pcap file
              Dump file to write filtered packets to.

       -f expression
              BPF expression which selects packets to be filtered.

       -s snaplen
              Capture snaplen bytes of data from each packet.

       -p     Disable promiscuous mode sniffing.

PROGRAM OPTIONS

       -S     count source IP addresses only

       -D     count destination IP addresses only

       -P     count pairs of IP addresses

       -C     output only the number of unique IP addresses or IP address pairs

                                                  1 April 2024                                         pcapuc(1)