sc_ipiddump(1) utility to dump IP-ID values embedded in ping, traceroute, and dealias


-words [-i ips ] [-O options ] [-U userid ] [file ... ]


The utility dumps the IP-ID values embedded in IPv4 and IPv6 responses to ping, traceroute, and dealias objects. The output contains the transit and receive timestamps, the source address used by scamper when probing, the interface address which replied, and the IPID value (in hexadecimal). The objects are sorted by transmit time. The supported options to are as follows:

-i ip
restricts the selection of source addresses to those with the given IP address(es).
-O options
allows the behavior of to be further tailored. The current choice for this option is:

do not parse traceroutes for IPID values.

-U userid
restricts the selection of warts objects to those with the given userid(s).


Given an input file foo.warts, the following command dumps IP-ID values found in objects with userid values 3 and 4:

sc_ipiddump -U 3,4 foo.warts

Given an input file foo.warts.gz, the following command dumps IP-ID values found in responses from IP address

zcat foo.warts.gz | sc_ipiddump -i


was written by Matthew Luckie <[email protected]>.