This tool searches a pattern in packets of a record, and saves matching packets in another record. The pattern can be a string, a mixed ('hello' 09 'bob'), or a regular expression. Parameter --src-file indicates the input record filename. Parameter --dst-file indicates the output record filename. Parameter --recordencode defines how to encode data in this record (suggested values: bin, pcap and mixed_wrap).
parameter | description | example |
-f|--src-file file | input record file | srcfile.txt |
-F|--dst-file file | output record file | dstfile.txt |
-r|--recordencode recordencode | encoding type for output record | bin |
-p|--pattern data | searched pattern | |
-c|--case|+c|--no-case | case sensitive | This boolean is set. Use + or --no- to unset it. |
-S|--string|+S|--no-string | search string | This boolean is set. Use + or --no- to unset it. |
-M|--mixed|+M|--no-mixed | search mixed string | |
-R|--regexp|+R|--no-regexp | search regular expression |