북극바람

Usage: rawsniff.exe [options]

Note:

    Must be administrator due to raw socket restrictions.  Also, antivirus may

    complain that you're opening a raw socket.  IPv4 only.

Options:

    -?            Get this help screen

    -v            Display version information

    --listen X    Listen on specified IP address (otherwise choose from list)

Types of packets:

    --tcp         Display TCP matches

    --udp         Display UDP matches

    --icmp        Display ICMP matches

    --other       Display matches for other protocols

Output options:

    --brief       Display brief (single line) packet information (default)

    --data       Brief mode, including readable ASCII data payloads

    --list         Display a list of packet information

    --full         Display the full list of packet information

    --gag        No output to console

    --pcap       Write out a timestamp.pcap file in the current directory.

                    (libpcap format)

    --packets X   Program exits after certain count of matching packets are

                      displayed (default is 2,147,483,647)

Filter:

    --ip X           Match packets with this IP in either src_ip or dst_ip

    --port X        Match packets with this IP in either src_port or dst_port

    --src_ip X      If specified, display packets with a given src_ip only

    --dst_ip X      If specfied, display packets with a given dst_ip only

    --src_port X   If specified, display packets with a given src_port only

    --dst_port X   If specified, display packets with a given dst_port only

    --nopid        Disable the process info display, which is on by default.

    --pid X         If specified, display packets that belong to a given Process ID only

    --process X   If specified, display packets that belong to a given Process name only

Usage: tcping [-flags] server-address [server-port]

   -t      : ping continuously until stopped via control-c

  -n 5    : for instance, send 5 pings

  -i 5     : for instance, ping every 5 seconds

  -w 0.5 : for instance, wait 0.5 seconds for a response

  -d      : include date and time on each line

  -b 1    : enable beeps (1 for on-down, 2 for on-up, 3 for on-change, 4 for always)

  -r 5     : for instance, relookup the hostname every 5 pings

  -s       : automatically exit on a successful ping

  -v       : print version and exit

  -j       : include jitter, using default rolling average

  -js 5   : include jitter, with a rolling average size of (for instance) 5.

  --tee  : mirror output to a filename specified after '--tee'

  -c      : only show an output line on changed state