=head1 NAME udpdump - Provide an UDP receiver that gets packets from network devices (like Aruba routers) and exports them in PCAP format. =head1 SYNOPSIS B S<[ B<--help> ]> S<[ B<--version> ]> S<[ B<--extcap-interfaces> ]> S<[ B<--extcap-dlts> ]> S<[ B<--extcap-interface>=EinterfaceE ]> S<[ B<--extcap-config> ]> S<[ B<--capture> ]> S<[ B<--fifo>=Epath to file or pipeE ]> S<[ B<--port>=EportE ]> S<[ B<--payload>=EtypeE ]> =head1 DESCRIPTION B is a extcap tool that provides an UDP receiver that listens for exported datagrams coming from any source (like Aruba routers) and exports them in PCAP format. This provides the user two basic functionalities: the first one is to have a listener that prevents the localhost to send back an ICMP port-unreachable packet. The second one is to strip out the lower layers (layer 2, IP, UDP) that are useless (are used just as export vector). The format of the exported datagrams are EXPORTED_PDU, as specified in https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob;f=epan/exported_pdu.h;hb=refs/heads/master =head1 OPTIONS =over 4 =item --help Print program arguments. =item --version Print program version. =item --extcap-interfaces List available interfaces. =item --extcap-interface=EinterfaceE Use specified interfaces. =item --extcap-dlts List DLTs of specified interface. =item --extcap-config List configuration options of specified interface. =item --capture Start capturing from specified interface save saved it in place specified by --fifo. =item --fifo=Epath to file or pipeE Save captured packet to file or send it through pipe. =item --port=EportE Set the listerner port. Port 5555 is the default. =item --payload=EtypeE Set the payload of the exported PDU. Default: data. =back =head1 EXAMPLES To see program arguments: udpdump --help To see program version: udpdump --version To see interfaces: udpdump --extcap-interfaces Example output: interface {value=udpdump}{display=UDP Listener remote capture} To see interface DLTs: udpdump --extcap-interface=udpdump --extcap-dlts Example output: dlt {number=252}{name=udpdump}{display=Exported PDUs} To see interface configuration options: udpdump --extcap-interface=udpdump --extcap-config Example output: arg {number=0}{call=--port}{display=Listen port}{type=unsigned}{range=1,65535}{default=5555}{tooltip=The port the receiver listens on} To capture: udpdump --extcap-interface=randpkt --fifo=/tmp/randpkt.pcapng --capture NOTE: To stop capturing CTRL+C/kill/terminate application. =head1 SEE ALSO wireshark(1), tshark(1), dumpcap(1), extcap(4) =head1 NOTES B is part of the B distribution. The latest version of B can be found at L. HTML versions of the Wireshark project man pages are available at: L. =head1 AUTHORS Original Author --------------- Dario Lombardo