NAME

     sc_warts2pcap — write packets included in warts object to a pcap file.

SYNOPSIS

     sc_warts2pcap [-o outfile] [-s sort] [file ...]

DESCRIPTION

     The sc_warts2pcap utility provides the ability to extract packets embedded in the tbit,
     sting, and sniff warts objects and write them to a pcap file, which can be read by tcpdump
     and wireshark.  The options are as follows:

     -o outfile
             specifies the name of the output file.  If no output file is specified, it will be
             written to the standard output, provided that it is not a tty.

     -o sort
             specifies how the pcap records (packets) are sorted before being written out.  By
             default, no sorting is applied; the packets are grouped as they are in the warts
             file.  If packet sorting is specified, the packets are written out in timestamp
             order.  Note that this operation requires the packets to be read into memory to be
             sorted, so it will require a corresponding amount of memory to complete.

EXAMPLES

     The command:

        sc_warts2pcap -o output.pcap file1.warts file2.warts

     will read the packet objects from file1.warts, and then file2.warts, and write them to
     output.pcap.

     The command:

        gzcat file1.warts.gz | sc_warts2pcap -s packet >file1.pcap

     will read the contents of the uncompressed warts file supplied on stdin, sort the packets by
     their timestamp, and then write the output to file1.pcap.

SEE ALSO

     scamper(1), tcpdump(1)

AUTHORS

     sc_warts2pcap is written by Stephen Eichler and Matthew Luckie.