'\" -*- coding: us-ascii -*-
.if \n(.g .ds T< \\FC
.if \n(.g .ds T> \\F[\n[.fam]]
.de URL
\\$2 \(la\\$1\(ra\\$3
..
.if \n(.g .mso www.tmac
.TH pcapip 1 "9 May 2009" "" ""
.SH NAME
pcapip \- filter a pcap for IP addresses
.SH SYNOPSIS
'nh
.fi
.ad l
\fBpcapip\fR \kx
.if (\nx>(\n(.l/2)) .nr x (\n(.l/5)
'in \n(.iu+\nxu
[\fIOPTIONS\fR]\&...
'in \n(.iu-\nxu
.ad b
'hy
.SH DESCRIPTION
\fBpcapip\fR filters an input pcap file based on a file containing IP addresses to be matched.
.SH "PCAPNET OPTIONS"
.TP 
\*(T<\fB\-i \fR\*(T>\fIinterface\fR
Input interface to read packets from.
.TP 
\*(T<\fB\-r \fR\*(T>\fIpcap file\fR
Dump file to read packets from.
.TP 
\*(T<\fB\-w \fR\*(T>\fIpcap file\fR
Dump file to write filtered packets to.
.TP 
\*(T<\fB\-f \fR\*(T>\fIexpression\fR
BPF expression which selects packets to be filtered.
.TP 
\*(T<\fB\-s \fR\*(T>\fIsnaplen\fR
Capture \fIsnaplen\fR bytes of data from each packet.
.TP 
\*(T<\fB\-p\fR\*(T>
Disable promiscuous mode sniffing.
.SH "PROGRAM OPTIONS"
.TP 
\*(T<\fB\-l \fR\*(T>\fIfile\fR
File containing list of IP addresses, one per line.