


Netdude(1)                                             Netdude(1)


NAME
       Netdude - graphical tcpdump trace file displayer and editor

SYNOPSIS
       netdude [options] [files]

VERSION
       This manpage is describing the Netdude 0.4 series.

DESCRIPTION
       Netdude  is  the  NETwork  DUmp data Displayer and Editor. It is a GUI-
       based tool that allows you to make detailed changes to packets in  tcp-
       dump tracefiles. You can inspect and modify value of every field proto-
       col headers of supported protocols, all  other  data  can  be  modified
       using a hex editor. Protocol support is supplied through protocol plug-
       ins, see details below to find out how to obtain a  list  of  the  cur-
       rently  installed protocols. Netdude is readily extendable through fea-
       ture plugins that can contain essentially arbitrary functionality,  use
       other  libraries,  etc.  The packet manipulation functionality is sepa-
       rated into a backend library, libnetdude.  Consider writing  a  libnet-
       dude application directly, in case dealing with a GUI is too cumbersome
       for your needs.

       For each trace currently being edited, Netdude constantly  communicates
       with  a tcpdump process to update the familiar tcpdump output that cor-
       responds to the trace. This also means that any changes  made  to  your
       local version of tcpdump are reflected in Netdude.

       With  the introduction of the 0.4 series, Netdude is now able to handle
       arbitrarily large files. To do this, only a relatively small number  of
       packets is loaded into memory at any one time. A lot of effort has gone
       into adding trace navigation support (ie jumps to arbitrary offsets and
       timestamps  --  this  is  mostly  handled through the pcapnav library),
       besides a buffering mechanism that can swap  in/out  trace  parts  that
       have been modified.

       Netdude  offers  the  following command line options, some of which are
       intended to provide installation directories for configure scripts etc:

OPTIONS
       --debug, -d
            prints out debugging information (only available if debugging sup-
            port was compiled in)

       --ludicrous-debug, -dd
            more debugging output. This reports debugging output  for  Netdude
            and libnetdude.

       --ridiculous-debug, -ddd
            and  even  more. Reports debugging output for Netdude, libnetdude,
            and libpcapnav.

       --prefix
            prints out the installation prefix of this Netdude.



                         February 4, 2004                       1





Netdude(1)                                             Netdude(1)


       --plugin-dir
            prints out the directory in which feature plugins are installed

       --include-dir
            prints out the directory in which plugin  authors  can  find  Net-
            dude's .h files

       --proto-dir
            prints out the directory in which protocol plugins are installed

       --plugins
            prints  out  the names and version of all currently installed lib-
            netdude and Netdude protocols

       -h, --help, -h
            displays this help output

       --version
            prints out the version info --version-maj  prints  out  the  major
            version number (0.3, 0.4 etc)

REPORTING BUGS
       Email bugs and feature requests to
       <christian@whoop.org>

SEE ALSO
       tcpdump(1), tcpslice(1), ethereal(1), pcapnav(3)

LICENSE
       Copyright Christian Kreibich and various contributors, 2000 - 2004

       Permission is hereby granted, free of charge, to any person obtaining a
       copy of this software and associated documentation  files  (the  "Soft-
       ware"),  to deal in the Software without restriction, including without
       limitation the rights to use, copy, modify, merge, publish, distribute,
       sublicense,  and/or  sell copies of the Software, and to permit persons
       to whom the Software is furnished to do so, subject  to  the  following
       conditions:

       The above copyright notice and this permission notice shall be included
       in all copies of the Software and its documentation and  acknowledgment
       shall  be  given  in  the documentation and software packages that this
       Software was used.

       THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
       OR  IMPLIED,  INCLUDING  BUT  NOT  LIMITED  TO  THE  WARRANTIES OF MER-
       CHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN
       NO  EVENT  SHALL  THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
       LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
       FROM,  OUT  OF  OR  IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
       DEALINGS IN THE SOFTWARE.






                         February 4, 2004                       2


