Netdude(1)

NAME
Netdude - graphical tcpdump trace file displayer and editor

SYNOPSIS
netdude [options] [files]

VERSION
This manpage is describing the Netdude 0.4 series.

DESCRIPTION
Netdude is the NETwork DUmp data Displayer and Editor. It is a GUI-based tool that allows you to make detailed changes to packets in tcpdump tracefiles. You can inspect and modify value of every field protocol headers of supported protocols, all other data can be modified using a hex editor. Protocol support is supplied through protocol plugins, see details below to find out how to obtain a list of the currently installed protocols. Netdude is readily extendable through feature plugins that can contain essentially arbitrary functionality, use other libraries, etc. The packet manipulation functionality is separated into a backend library, libnetdude. Consider writing a libnetdude application directly, in case dealing with a GUI is too cumbersome for your needs.

For each trace currently being edited, Netdude constantly communicates with a tcpdump process to update the familiar tcpdump output that corresponds to the trace. This also means that any changes made to your local version of tcpdump are reflected in Netdude.

With the introduction of the 0.4 series, Netdude is now able to handle arbitrarily large files. To do this, only a relatively small number of packets is loaded into memory at any one time. A lot of effort has gone into adding trace navigation support (ie jumps to arbitrary offsets and timestamps -- this is mostly handled through the pcapnav library), besides a buffering mechanism that can swap in/out trace parts that have been modified.

Netdude offers the following command line options, some of which are intended to provide installation directories for configure scripts etc:

OPTIONS

--debug, -d
    prints out debugging information (only available if debugging support was compiled in)

--ludicrous-debug, -dd
    more debugging output. This reports debugging output for Netdude and libnetdude.

--ridiculous-debug, -ddd
    and even more. Reports debugging output for Netdude, libnetdude, and libpcapnav.

--prefix
    prints out the installation prefix of this Netdude.

--plugin-dir
    prints out the directory in which feature plugins are installed

--include-dir
    prints out the directory in which plugin authors can find Netdude's .h files

--proto-dir
    prints out the directory in which protocol plugins are installed

--plugins
    prints out the names and version of all currently installed libnetdude and Netdude protocols

-h, --help, -h
    displays this help output

--version
    prints out the version info --version-maj prints out the major version number (0.3, 0.4 etc)

REPORTING BUGS
Email bugs and feature requests to
<christian@whoop.org>

SEE ALSO
tcpdump(1), tcpslice(1), ethereal(1), pcapnav(3)

LICENSE
Copyright Christian Kreibich and various contributors, 2000 - 2004

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies of the Software and its documentation and acknowledgment shall be given in the documentation and software packages that this Software was used.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.