NAME

       tracediff - find and print differences between two traces

SYNOPSIS

       tracediff [ -m maxdiff ] firsturi seconduri

DESCRIPTION

       tracediff  compares  two  trace  files  and  prints  the details of packets that differ to
       standard output. This is useful for finding packets that are present in one trace but  not
       another or for finding conversion or snapping errors.

       -m maxdiff
              stop processing after displaying 'maxdiff' differences

EXAMPLES

       tracediff -m 10 erf:/traces/orig.erf.gz pcapfile:/traces/convert.pcap.gz

BUGS

       Not  exactly  a  bug,  but  the  contents  of  the  framing  headers (i.e. the PCAP or ERF
       encapsulation) are not compared.

LINKS

       More    details    about    tracediff    (and    libtrace)     can     be     found     at
       http://www.wand.net.nz/trac/libtrace/wiki/UserDocumentation

SEE ALSO

       libtrace(3),     tracemerge(1),     tracefilter(1),     traceconvert(1),    tracestats(1),
       tracesummary(1),  tracertstats(1),   tracesplit(1),   tracesplit_dir(1),   tracereport(1),
       tracepktdump(1), traceanon(1), tracereplay(1), traceends(1), tracetopends(1)

AUTHORS

       Shane Alcock <salcock@cs.waikato.ac.nz>