TRACEDIFF(1) User Commands TRACEDIFF(1)NAMEtracediff - find and print differences between two traces
SYNOPSIStracediff [ -m maxdiff ] firsturi seconduri
DESCRIPTIONtracediff compares two trace files and prints the details of packets
that differ to standard output. This is useful for finding packets that
are present in one trace but not another or for finding conversion or
snapping errors.
-m maxdiff
stop processing after displaying 'maxdiff' differences
EXAMPLEStracediff-m 10 erf:/traces/orig.erf.gz pcapfile:/traces/convert.pcap.gz
BUGS
Not exactly a bug, but the contents of the framing headers (i.e. the
PCAP or ERF encapsulation) are not compared.
LINKS
More details about tracediff (and libtrace) can be found at
http://www.wand.net.nz/trac/libtrace/wiki/UserDocumentation
SEE ALSOlibtrace(3), tracemerge(1), tracefilter(1), traceconvert(1), traces‐
tats(1), tracesummary(1), tracertstats(1), tracesplit(1), traces‐
plit_dir(1), tracereport(1), tracepktdump(1), traceanon(1), tracere‐
play(1), traceends(1), tracetopends(1)AUTHORS
Shane Alcock <salcock@cs.waikato.ac.nz>
tracediff (libtrace) January 2010 TRACEDIFF(1)