TCPDump Test/Tool

[mfeit-internet2]

Consider a test that runs tcpdump for a time and spews out the results.

Note that this could produce very large data; consider how to mitigate that.

[bltierney]

this could also run tcptrace automatically, which would reduce the size of the output to send back to the client.

One way to do this would be:

pscheduler task --pcapture tcptrace -option -Sl throughput --dest hostname

This would run tcpdump in parallel with iperf3, and send the results thru tcptrace with the flags "-Sl".

[mfeit-internet2]

It might be better to use tshark (see https://www.wireshark.org/docs/wsug_html_chunked/AppToolstshark.html) to do the capture. It has a switch to tell it to shut down after a specified number of seconds: -a duration:1234.

Sample command line:

tshark -a duration:15 -c 1 -w /tmp/pcap -q -n