Re: [tcpdump-workers] Trace conversion.

2004-09-17 Thread alex medvedev
Hi Paul, i think this will accomplish what you want: # tcpdump -ln ip| awk '{print $1,,, $5}' | sed 's/\.[0-9]*:$//' this won't work with icmp though... -alexm 16:11 17/09/2004 On Fri, 17 Sep 2004, Paul Berube wrote: Hi. I think I have a simple problem, but I can't seem to find a simple

Re: [tcpdump-workers] Trace conversion.

2004-09-17 Thread Paul Berube
i think this will accomplish what you want: # tcpdump -ln ip| awk '{print $1,,, $5}' | sed 's/\.[0-9]*:$//' The output looks fantastic, nearly exactly the format I wanted! One question, though. I see h.m.s:ms, a.b.c.d.x:, and I'm wondering what the 'x' is? By the frequent occurences of 80,

Re: [tcpdump-workers] Trace conversion.

2004-09-17 Thread Guy Harris
On Sep 17, 2004, at 3:20 PM, Paul Berube wrote: One question, though. I see h.m.s:ms, a.b.c.d.x:, and I'm wondering what the 'x' is? By the frequent occurences of 80, I'm guessing these are port numbers, but I'd like to be sure :) Yes. this won't work with icmp though... That's fine, I'm only

Re: [tcpdump-workers] Trace conversion.

2004-09-17 Thread Michael Richardson
-BEGIN PGP SIGNED MESSAGE- Paul == Paul Berube [EMAIL PROTECTED] writes: Paul Ok. I have a couple traces in tcpdump format. What I Paul actually need is just a list of destination addresses for the Paul trace. I might be able to use a timestamp if I got really Paul