traceconvert

traceconvert is a libtrace tool that takes a single libtrace input (which can be either an existing trace or a live capture input) and writes the contents to any libtrace supported output format.

Usage

traceconvert inputuri outputuri

Applications

Converting from one trace format to another

    traceconvert erf:mytrace.erf.gz pcapfile:mytrace.pcap.gz

Capturing live data and writing it to disk

    traceconvert int:eth0 pcapfile:mytrace.pcap.gz

Replaying a trace onto an interface

    traceconvert pcapfile:mytrace.pcap.gz int:eth0

Note: this will replay the trace exactly as it was captured, i.e. IP headers, link level headers etc will all be unaltered.

Notes

traceconvert does not currently support setting a compression method or level, so will always write gzip level 1 compressed output. For more control over compression, use TraceSplit instead.