output => 'ntp-v.out',
args => '-v'
},
+ {
+ name => 'arcnet-rfc1051-arp-icmp-http-e',
+ input => 'arcnet-rfc1051-arp-icmp-http.pcap',
+ output => 'arcnet-rfc1051-arp-icmp-http-e.out',
+ args => '-e'
+ },
+ {
+ name => 'arcnet-rfc1201-arp-icmp-http-e',
+ input => 'arcnet-rfc1201-arp-icmp-http.pcap',
+ output => 'arcnet-rfc1201-arp-icmp-http-e.out',
+ args => '-e'
+ },
);
sub decode_exit_status {
--- /dev/null
+ 1 2025-05-10 13:17:29.141151 be 00 ed 23: Request who-has 10.80.131.254 tell 10.80.131.1, length 18
+ 2 2025-05-10 13:17:29.141208 50 be 00 23: Reply 10.80.131.254 is-at 50, length 18
+ 3 2025-05-10 13:17:29.142411 be 50 ab 89: 10.80.131.1 > 10.80.131.254: ICMP echo request, id 58112, seq 0, length 64
+ 4 2025-05-10 13:17:29.142586 50 be ed 89: 10.80.131.254 > 10.80.131.1: ICMP echo reply, id 58112, seq 0, length 64
+ 5 2025-05-10 13:17:30.138392 be 50 ab 89: 10.80.131.1 > 10.80.131.254: ICMP echo request, id 58112, seq 256, length 64
+ 6 2025-05-10 13:17:30.138478 50 be ab 89: 10.80.131.254 > 10.80.131.1: ICMP echo reply, id 58112, seq 256, length 64
+ 7 2025-05-10 13:17:33.388386 be 50 c6 62: 10.80.131.1.1024 > 10.80.3.254.53: 54328+ A? tcpdump.org. (29)
+ 8 2025-05-10 13:17:33.580847 50 be 06 78: 10.80.3.254.53 > 10.80.131.1.1024: 54328 1/0/0 A 146.190.240.163 (45)
+ 9 2025-05-10 13:17:33.583942 be 50 b5 79: 10.80.131.1.1024 > 10.80.3.254.53: 54329+ PTR? 163.240.190.146.in-addr.arpa. (46)
+ 10 2025-05-10 13:17:33.625941 50 be 06 115: 10.80.3.254.53 > 10.80.131.1.1024: 54329 1/0/0 PTR flagpole-4.tcpdump.org. (82)
+ 11 2025-05-10 13:17:33.628611 be 50 c3 65: 10.80.131.1.1026 > 146.190.240.163.80: Flags [S], seq 2399122329, win 1872, options [mss 468,sackOK,TS val 287949 ecr 0,nop,wscale 0], length 0
+ 12 2025-05-10 13:17:33.672113 50 be 06 65: 146.190.240.163.80 > 10.80.131.1.1026: Flags [S.], seq 3394579464, ack 2399122330, win 14600, options [mss 1320,nop,wscale 12,sackOK,TS val 1078823769 ecr 287949], length 0
+ 13 2025-05-10 13:17:33.673539 be 50 cb 57: 10.80.131.1.1026 > 146.190.240.163.80: Flags [.], ack 1, win 1872, options [nop,nop,TS val 287954 ecr 1078823769], length 0
+ 14 2025-05-10 13:17:33.676852 be 50 09 251: 10.80.131.1.1026 > 146.190.240.163.80: Flags [P.], seq 1:195, ack 1, win 1872, options [nop,nop,TS val 287954 ecr 1078823769], length 194: HTTP: GET / HTTP/1.1
+ 15 2025-05-10 13:17:33.713912 50 be 06 57: 146.190.240.163.80 > 10.80.131.1.1026: Flags [.], ack 1, win 1024, options [nop,nop,TS val 1078823809 ecr 287954], length 0
+ 16 2025-05-10 13:17:33.737808 50 be 06 57: 146.190.240.163.80 > 10.80.131.1.1026: Flags [.], ack 195, win 1024, options [nop,nop,TS val 1078823832 ecr 287954], length 0
+ 17 2025-05-10 13:17:33.881496 50 be 06 242: 146.190.240.163.80 > 10.80.131.1.1026: Flags [P.], seq 1:186, ack 195, win 1024, options [nop,nop,TS val 1078823978 ecr 287954], length 185: HTTP: HTTP/1.1 301 Moved Permanently
+ 18 2025-05-10 13:17:33.883099 50 be 06 285: 146.190.240.163.80 > 10.80.131.1.1026: Flags [P.], seq 186:414, ack 195, win 1024, options [nop,nop,TS val 1078823978 ecr 287954], length 228: HTTP
+ 19 2025-05-10 13:17:33.885423 be 50 cb 57: 10.80.131.1.1026 > 146.190.240.163.80: Flags [.], ack 186, win 2736, options [nop,nop,TS val 287975 ecr 1078823978], length 0
+ 20 2025-05-10 13:17:33.886121 be 50 cb 57: 10.80.131.1.1026 > 146.190.240.163.80: Flags [.], ack 414, win 3648, options [nop,nop,TS val 287975 ecr 1078823978], length 0
+ 21 2025-05-10 13:17:33.888015 be 50 cb 57: 10.80.131.1.1026 > 146.190.240.163.80: Flags [F.], seq 195, ack 414, win 3648, options [nop,nop,TS val 287975 ecr 1078823978], length 0
+ 22 2025-05-10 13:17:33.924571 50 be 06 57: 146.190.240.163.80 > 10.80.131.1.1026: Flags [.], ack 196, win 1024, options [nop,nop,TS val 1078824024 ecr 287975], length 0
+ 23 2025-05-10 13:17:33.925800 50 be 06 57: 146.190.240.163.80 > 10.80.131.1.1026: Flags [F.], seq 414, ack 196, win 1024, options [nop,nop,TS val 1078824024 ecr 287975], length 0
+ 24 2025-05-10 13:17:33.927071 be 50 cb 57: 10.80.131.1.1026 > 146.190.240.163.80: Flags [.], ack 415, win 3648, options [nop,nop,TS val 287979 ecr 1078824024], length 0
+ 25 2025-05-10 13:17:34.140710 50 be 00 23: Request who-has 10.80.131.1 tell 10.80.131.254, length 18
+ 26 2025-05-10 13:17:34.141487 be 50 ed 23: Reply 10.80.131.1 is-at be, length 18
--- /dev/null
+ 1 2025-05-10 13:20:23.012325 be 00 ea 26: Request who-has 10.80.131.254 tell 10.80.131.1, length 18
+ 2 2025-05-10 13:20:23.012419 50 be 00 26: Reply 10.80.131.254 is-at 50, length 18
+ 3 2025-05-10 13:20:23.013721 be 50 a8 92: 10.80.131.1 > 10.80.131.254: ICMP echo request, id 59392, seq 0, length 64
+ 4 2025-05-10 13:20:23.013926 50 be ea 92: 10.80.131.254 > 10.80.131.1: ICMP echo reply, id 59392, seq 0, length 64
+ 5 2025-05-10 13:20:24.009498 be 50 a8 92: 10.80.131.1 > 10.80.131.254: ICMP echo request, id 59392, seq 256, length 64
+ 6 2025-05-10 13:20:24.009584 50 be a8 92: 10.80.131.254 > 10.80.131.1: ICMP echo reply, id 59392, seq 256, length 64
+ 7 2025-05-10 13:20:28.012714 50 be 83 26: Request who-has 10.80.131.1 tell 10.80.131.254, length 18
+ 8 2025-05-10 13:20:28.013554 be 50 ea 26: Reply 10.80.131.1 is-at be, length 18
+ 9 2025-05-10 13:20:28.179366 be 50 c3 65: 10.80.131.1.1024 > 10.80.3.254.53: 16943+ A? tcpdump.org. (29)
+ 10 2025-05-10 13:20:28.252775 50 be oldip 81: 10.80.3.254.53 > 10.80.131.1.1024: 16943 1/0/0 A 146.190.240.163 (45)
+ 11 2025-05-10 13:20:28.255861 be 50 b2 82: 10.80.131.1.1024 > 10.80.3.254.53: 16944+ PTR? 163.240.190.146.in-addr.arpa. (46)
+ 12 2025-05-10 13:20:28.296735 50 be oldip 118: 10.80.3.254.53 > 10.80.131.1.1024: 16944 1/0/0 PTR flagpole-4.tcpdump.org. (82)
+ 13 2025-05-10 13:20:28.299292 be 50 c0 68: 10.80.131.1.1027 > 146.190.240.163.80: Flags [S], seq 2567257385, win 1872, options [mss 468,sackOK,TS val 305412 ecr 0,nop,wscale 0], length 0
+ 14 2025-05-10 13:20:28.346375 50 be oldip 68: 146.190.240.163.80 > 10.80.131.1.1027: Flags [S.], seq 305328889, ack 2567257386, win 14600, options [mss 1320,nop,wscale 12,sackOK,TS val 1281130006 ecr 305412], length 0
+ 15 2025-05-10 13:20:28.347811 be 50 c8 60: 10.80.131.1.1027 > 146.190.240.163.80: Flags [.], ack 1, win 1872, options [nop,nop,TS val 305417 ecr 1281130006], length 0
+ 16 2025-05-10 13:20:28.351197 be 50 06 254: 10.80.131.1.1027 > 146.190.240.163.80: Flags [P.], seq 1:195, ack 1, win 1872, options [nop,nop,TS val 305417 ecr 1281130006], length 194: HTTP: GET / HTTP/1.1
+ 17 2025-05-10 13:20:28.390574 50 be oldip 60: 146.190.240.163.80 > 10.80.131.1.1027: Flags [.], ack 1, win 1024, options [nop,nop,TS val 1281130053 ecr 305417], length 0
+ 18 2025-05-10 13:20:28.417685 50 be oldip 60: 146.190.240.163.80 > 10.80.131.1.1027: Flags [.], ack 195, win 1024, options [nop,nop,TS val 1281130074 ecr 305417], length 0
+ 19 2025-05-10 13:20:28.550695 50 be oldip 245: 146.190.240.163.80 > 10.80.131.1.1027: Flags [P.], seq 1:186, ack 195, win 1024, options [nop,nop,TS val 1281130211 ecr 305417], length 185: HTTP: HTTP/1.1 301 Moved Permanently
+ 20 2025-05-10 13:20:28.552307 50 be oldip 288: 146.190.240.163.80 > 10.80.131.1.1027: Flags [P.], seq 186:414, ack 195, win 1024, options [nop,nop,TS val 1281130211 ecr 305417], length 228: HTTP
+ 21 2025-05-10 13:20:28.554661 be 50 c8 60: 10.80.131.1.1027 > 146.190.240.163.80: Flags [.], ack 186, win 2736, options [nop,nop,TS val 305438 ecr 1281130211], length 0
+ 22 2025-05-10 13:20:28.555316 be 50 c8 60: 10.80.131.1.1027 > 146.190.240.163.80: Flags [.], ack 414, win 3648, options [nop,nop,TS val 305438 ecr 1281130211], length 0
+ 23 2025-05-10 13:20:28.557232 be 50 c8 60: 10.80.131.1.1027 > 146.190.240.163.80: Flags [F.], seq 195, ack 414, win 3648, options [nop,nop,TS val 305438 ecr 1281130211], length 0
+ 24 2025-05-10 13:20:28.607583 50 be oldip 60: 146.190.240.163.80 > 10.80.131.1.1027: Flags [.], ack 196, win 1024, options [nop,nop,TS val 1281130271 ecr 305438], length 0
+ 25 2025-05-10 13:20:28.608180 50 be oldip 60: 146.190.240.163.80 > 10.80.131.1.1027: Flags [F.], seq 414, ack 196, win 1024, options [nop,nop,TS val 1281130271 ecr 305438], length 0
+ 26 2025-05-10 13:20:28.609468 be 50 c8 60: 10.80.131.1.1027 > 146.190.240.163.80: Flags [.], ack 415, win 3648, options [nop,nop,TS val 305443 ecr 1281130271], length 0