summaryrefslogtreecommitdiff
path: root/Documentation/ref/ovs-tcpdump.8.rst
blob: b9f8cdf6f78650b7f1dd1657b8a6f6706ab3785c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
===========
ovs-tcpdump
===========

Synopsis
========

``ovs-tcpdump -i <port> <tcpdump options>...``

Description
===========

``ovs-tcpdump`` creates switch mirror ports in the ``ovs-vswitchd``
daemon and executes ``tcpdump`` to listen against those ports. When
the ``tcpdump`` instance exits, it then cleans up the mirror port it
created.

``ovs-tcpdump`` will not allow multiple mirrors for the same port. It
has some logic to parse the current configuration and prevent
duplicate mirrors.

The ``-i`` option may not appear multiple times.

It is important to note that under Linux-based kernels, tap devices do
not receive packets unless the specific tuntap device has been opened by an
application.  This requires ``CAP_NET_ADMIN`` privileges, so the
``ovs-tcpdump`` command must be run as a user with such permissions (this
is usually a super-user).

Options
=======

* ``-h`` or ``--help``

  Prints a brief help message to the console.

* ``-V`` or ``--version``

  Prints version information to the console.

* ``--db-sock <socket>``

  The Open vSwitch database socket connection string. The default is
  ``unix:<rundir>/db.sock``.

* ``--dump-cmd <command>``

  The command to run instead of ``tcpdump``.

* ``-i`` or ``--interface``

  The interface for which a mirror port should be created, and packets
  should be dumped.

* ``--mirror-to``

  The name of the interface which should be the destination of the mirrored
  packets. The default is ``mi<port>``.

* ``--span``

  If specified, mirror all ports (optional).

See Also
========

``ovs-appctl(8)``, ``ovs-vswitchd(8)``, ``ovs-pcap(1)``,
``ovs-tcpundump(1)``, ``tcpdump(8)``, ``wireshark(8)``.