Link Search Menu Expand Document

Usage

nPrint can be used in a wide variety of ways. A full (and up to date) list of options can be found by running nprint --help.

  • Collect traffic in real time and print IPv4 / TCP nPrints to stdout
nprint -4 -t
  • Collect traffic in real time and print IPv4 / TCP nPrints to file
nprint -4 -t -W test.npt 
  • Use BPF filters to filter traffic - ICMP nPrints with traffic filtered for only ICMP.
nprint -i -W test.npt -f icmp 
  • Read from a PCAP and nPrint the first 20 payload bytes for each packet to an output file
nprint -P test.pcap -W out.npt -p 20 
  • Take a nPrint file and reverse it into a PCAP
nprint -N test.npt -W test.pcap
  • Include a relative timestamp for each packet, capturing timing information along with selected protocols
nprint -R -4 -t