NAME

       ndpiReader - example tool for libndpi

SYNOPSIS

       ndpiReader -i file.pcap|device [options]

DESCRIPTION

       The  ndpiReader  command is an example tool that uses libndpi.  ndpiReader is able to read
       from a pcap file or catpure traffic from a network interface and process it with  libndpi.
       It implements only some basic features just to show what can be done with libndpi.

OPTIONS

       -i file.pcap|device
              Specify  a  pcap  file/playlist  to  read packets from or a device for live capture
              (comma-separated list).

       -f bpf_filter
              Specify a BPF filter for filtering selected traffic.

       -s duration
              Maximum capture duration in seconds (live traffic capture only).

       -p file.protos
              Specify a protocol file (eg. protos.txt).

       -l num_loops
              Number of detection loops (test only).

       -n num_threads
              Number of threads. Default: number of interfaces in -i. Ignored with pcap files.

       -j file.json
              Specify a file to write the content of packets in .json format.

       -g id:id...
              Thread affinity mask (one core id per thread).

       -d     Disable protocol guess and use only DPI.

       -t     Dissect GTP tunnels.

       -h     Display a usage message.

       -v 1|2 Verbose 'unknown protocol' packet print. 1=verbose, 2=very verbose.

       -V 1|2 Verbose libndpi trace log print. 1=trace, 2=debug.

                                            2014-08-15                              NDPIREADER(1)