#! /bin/sh # Emulate dumbdecode.py from python netarch # The advantage here is, after the pcat step, you're dealing with text files. # * cache the output of pcat to speed things up a little. # * tail -n +5000 to ignore the first 5000 lines of your cache. # * grep the cache, use sed, awk, whatever pmerge "$@" | pcat | while read ts proto src dst opts payload; do when=$(TZ=Z date -d @${ts%.*} "+%Y-%m-%d %H:%M:%S") printf "Packet %s None: None\n" $proto printf " %s -> %s (%s)\n" ${src%,*} ${dst%,*} "$when" echo $payload | unhex | hd echo done