Add some notes.

This commit is contained in:
Sebastian Lenzlinger 2024-05-02 04:06:46 +02:00
parent 48141f8c9c
commit 6316ae378d
3 changed files with 39 additions and 0 deletions

View File

@ -0,0 +1,16 @@
# Needed Metadata
- _Must_ contain IP address of *IoT* device
- _Can_ contain IP addr of capture host
# Options
## tcpdump options
see [[tcpdump]]
## kybcap options
| Option | Desciption|
| ------- | ---------- |
| `--setup` | Go through guided setup process |
| `--meta-config` | Go through guided meta data setup |
| `--mdevice=` | _Metadata_ : Specify device name |
| `--mipdev=` | _Metadata_ : Specify device ip address |
| `--mmac=` | _Metadata_ : Specify device MAC address |
| `--to-csv` | _post_processing: extract pcap into csv |

View File

@ -0,0 +1 @@
# `argparse`

22
notes/wiki/tcpdump.md Normal file
View File

@ -0,0 +1,22 @@
[docs](https://www.tcpdump.org/manpages/tcpdump.1.html)
### Options
#### `tcpdump`
| Option | Description |
| ------- | ------------ |
| `-c` _count_ <br/> `--count` | to specify number of packets to capture |
| `-i` _interface_ <br/> `--interface=` | specify the interface e.g. 'eth0' or 'wlan0' etc. |
| `-F` _file_ | Get filter expression from _file_ |
| `-I` <br/> `--monitor-mode` | Put interface into monitor mode|
| `-n` | No name resolution for addresses (host, port no. etc) |
| `-#` <br/> `--number` | Print a packet number at beginning of line |
|`-t` | _Don't_ print a timestamp on each dump line. |
|`-tt` | Print the timestamp, as seconds since January 1, 1970, 00:00:00, UTC, and fractions of a second since that time, on each dump line. |
| `-ttt` | Print a delta (res dep on `--time-stamp-precision` option) between current and previous line on each dump line. default is microsecond resolution. |
| `-tttt` | Print a timestamp, as hours, minutes, seconds, and fractions of a second since midnight, preceded by the date, on each dump line. |
| `-ttttt` |Print a delta (res dep on `--time-stamp-precision`) between current and first line on each dump line. default is microsecond resolution. |
| `-w` _file_ | Write raw packets to _file_ |
| `-e` | print link level header. See manpage for more details |