1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
.TH epan 8
.SH NAME
epan \- an offline ethernet protocol analyzer
.SH SYNOPSIS
epan [datadir]
.SH DESCRIPTION
.I Epan
allows you to decode any data captured by tools like
\fBedump(8)\fR or \fBtcpdump(8)\fR, i.e. you'll see all the
details of protocols like IP, TCP, UDP, DNS or RIP. Epan currently
contains more than 25 protocol decoders.
After loading the capture data the program will show you
the first 1000 frames in a MAC overview mode. You can select
the next 1000 frames by using the counter at the top of the
window. To get more information about a frame just select a
frame from the overview browser.
.I Epan
will will show a short summary for this frame an the lower
right corner. To get a more detailed report click on the
\*(rqFrame Detail\*(lq button.
To get some statistics (frame size distribution, utilization, ...)
press the "statistics" button.
.SH XRESOURCES
.TP 8
.B datadir (type: string)
Set the directory for the capture data (you can also
specify it on the command line).
.TP 8
.B pattern (type: string)
Show only filenames in file selector which match the pattern.
.TP 8
.B tooltips (type: boolean)
disable or enable the \*(rqtooltips\*(lq (enabled by default).
.TP 8
.B frdtop (type: boolean)
If set to 1 the frame detail browser starts with the first
line (default: 1).
.TP 8
.B modemspeed (type: string)
Set the maximum speed (in bps) of your modem (default 64000).
This value is used for non ethnernet capdure data.
.TP 8
.B cap_iface (type: string)
Capture window: set default capture interface.
.TP 8
.B cap_savefile (type: string)
Capture window: set default save filename.
.TP 8
.B cap_filterfile (type: string)
Capture window: set default filter filename.
.TP 8
.B cap_filtercmd (type: string)
Capture window: set default filter command.
.TP 8
.B cap_count (type: string)
Capture window: set default no. of frames to capture.
.TP 8
.B cap_snaplen (type: string)
Capture window: set default snaplen (default: 1514).
.TP 8
.B cap_timeout (type: string)
Capture window: set default timeout (default: 1000).
.TP 8
.B cap_promisc (type: boolean)
Capture window: use device in promisc mode by default
(default: yes).
.TP 8
.B cap_timestamp (type: boolean)
Capture window: add timestamp to save filename (default: no).
.SH ENVIRONMENT
.I Epan
uses the TMPDIR variable to select a directory for
temporary data. By default it uses the /tmp directory.
.SH Files
/usr/lib/epan/vendorcodes.dat
/usr/lib/epan/epan_pstats
.SH SEE ALSO
edump(8), tcpdump(8)
.SH AUTHOR
Peter Tobias <tobias@et-inf.fho-emden.de
|
