Skip to content

tracesplit_dir

salcock edited this page Dec 19, 2014 · 1 revision

tracesplit_dir is a libtrace tool that splits a trace into two separate traces, one for each direction.

Usage

tracesplit_dir inputuri outputuri_incoming outputuri_outgoing

Applications

Split a trace based on direction:

    tracesplit_dir erf:trace.erf.gz erf:trace_in.erf.gz erf:trace_out.erf.gz

Notes

  • The trace format for the output traces is not required to be the same as in the input format. In fact, the two output traces can be in different formats as well. For example,

        tracesplit_dir int:eth0 pcapfile:trace_in.pcap.gz erf:trace_out.erf.gz
    

    will work just fine. Be warned, though, that some format-specific information can be lost when changing the trace format, e.g. pcap format headers have no space to store erf rxerror information.

Clone this wiki locally