NAME

       opapacketcapture

       Starts capturing packet data.

       To stop capture and trigger dump, use SIGINT or SIGUSR1. Program dumps packets to file and
       exits.

       NOTE: Using opapacketcapture with large amounts of traffic can cause performance issues on
       the given host. Intel recommends you use opapacketcapture on hosts with lower packet rates
       and bandwidth.

Syntax

       opapacketcapture [-o outfile] [-d devfile] [-f filterfile]
       [-t triggerfile] [-l triggerlag][-a alarm] [-p packets] [-s maxblocks]
       [-v [-v]]

Options

       --help    Produces full help text.

       -o outfile
                 Specifies the output file for captured packets.
                 Default is packetDump.pcap

       -d devfile
                 Specifies the device file for capturing packets.

       -f filterfile
                 Specifies the file used for filtering. If absent, no filtering is done.

       -t triggerfile
                 Specifies the file used  for  triggering  a  stop  capture.  If  absent,  normal
                 triggering is performed.

       -l triggerlag
                 Specifies  the  number  of  packets  to  collect after trigger condition is met,
                 before dumping data and exiting. Default is 10.

       -a alarm  Specifies the number of seconds for alarm trigger to dump capture and exit.

       -p packets
                 Specifies the number of packets for alarm trigger to dump capture and exit.

       -s maxblocks
                 Specifies the number of  blocks  to  allocate  for  ring  buffer.  Value  is  in
                 Millions. Default is 2 which corresponds to 128 MiB because 1 block = 64 Bytes.

       -v        Produces verbose output. (Use verbose Level 1+ to show levels.)

Example

       # opapacketcapture
       opapacketcapture: Capturing packets using 128 MiB buffer
       ^C
       opapacketcapture: Triggered
       Number of packets stored is 100

       In the example above, opapacketcapture operates until CTRL+C is entered.