.\" Man page generated from reStructuredText.
.
.
.nr rst2man-indent-level 0
.
.de1 rstReportMargin
\\$1 \\n[an-margin]
level \\n[rst2man-indent-level]
level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
-
\\n[rst2man-indent0]
\\n[rst2man-indent1]
\\n[rst2man-indent2]
..
.de1 INDENT
.\" .rstReportMargin pre:
. RS \\$1
. nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin]
. nr rst2man-indent-level +1
.\" .rstReportMargin post:
..
.de UNINDENT
. RE
.\" indent \\n[an-margin]
.\" old: \\n[rst2man-indent\\n[rst2man-indent-level]]
.nr rst2man-indent-level -1
.\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
.in \\n[rst2man-indent\\n[rst2man-indent-level]]u
..
.TH "OVS-TCPDUMP" "8" "Feb 05, 2024" "3.3" "Open vSwitch"
.SH NAME
ovs-tcpdump \- Dump traffic from an Open vSwitch port using tcpdump
.SH SYNOPSIS
.sp
\fBovs\-tcpdump \-i <port> <tcpdump options>...\fP
.SH DESCRIPTION
.sp
\fBovs\-tcpdump\fP creates switch mirror ports in the \fBovs\-vswitchd\fP
daemon and executes \fBtcpdump\fP to listen against those ports. When
the \fBtcpdump\fP instance exits, it then cleans up the mirror port it
created.
.sp
\fBovs\-tcpdump\fP will not allow multiple mirrors for the same port. It
has some logic to parse the current configuration and prevent
duplicate mirrors.
.sp
The \fB\-i\fP option may not appear multiple times.
.sp
It is important to note that under Linux\-based kernels, tap devices do
not receive packets unless the specific tuntap device has been opened by an
application.  This requires \fBCAP_NET_ADMIN\fP privileges, so the
\fBovs\-tcpdump\fP command must be run as a user with such permissions (this
is usually a super\-user).
.SH OPTIONS
.INDENT 0.0
.IP \(bu 2
\fB\-h\fP or \fB\-\-help\fP
.sp
Prints a brief help message to the console.
.IP \(bu 2
\fB\-V\fP or \fB\-\-version\fP
.sp
Prints version information to the console.
.IP \(bu 2
\fB\-\-db\-sock <socket>\fP
.sp
The Open vSwitch database socket connection string. The default is
\fBunix:<rundir>/db.sock\fP\&.
.IP \(bu 2
\fB\-\-dump\-cmd <command>\fP
.sp
The command to run instead of \fBtcpdump\fP\&.
.IP \(bu 2
\fB\-i\fP or \fB\-\-interface\fP
.sp
The interface for which a mirror port should be created, and packets
should be dumped.
.IP \(bu 2
\fB\-\-mirror\-to\fP
.sp
The name of the interface which should be the destination of the mirrored
packets. The default is \fBmi<port>\fP\&.
.IP \(bu 2
\fB\-\-span\fP
.sp
If specified, mirror all ports (optional).
.UNINDENT
.SH SEE ALSO
.sp
\fBovs\-appctl(8)\fP, \fBovs\-vswitchd(8)\fP, \fBovs\-pcap(1)\fP,
\fBovs\-tcpundump(1)\fP, \fBtcpdump(8)\fP, \fBwireshark(8)\fP\&.
.SH AUTHOR
The Open vSwitch Development Community
.SH COPYRIGHT
2016-2024, The Open vSwitch Development Community
.\" Generated by docutils manpage writer.
.