%require -q false # tcpdump format changes make this test unreasonable %require -q click-buildtool provides FromTcpdump %script # read from tcpdump output file; check headers, emit to a dump click -e " FromTcpdump(IN1, STOP true, ZERO true, CHECKSUM true) -> ToDump(OUT1, ENCAP IP); " # use tcpdump to verify dump tcpdump -nn -tt -r OUT1 > OUT2 %file IN1 1.056252 169.232.91.64.1040 > 239.255.255.250.1900: udp 90 [ttl 1] 2.898617 169.232.91.4.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] 3.513694 169.232.91.3.769 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] 3.514941 169.232.91.138.49204 > 239.255.255.253.svrloc: udp 49 5.226619 192.168.1.100.32784 > 192.150.187.37.ssh: P 760650054:760650102(48) ack 300852684 win 32800 (DF) [tos 0x10] 5.246758 192.150.187.37.ssh > 192.168.1.100.32784: P 1:81(80) ack 48 win 57600 (DF) [tos 0x10] 5.246805 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 81 win 32800 (DF) [tos 0x10] 5.259281 192.150.187.37.ssh > 192.168.1.100.32784: P 81:145(64) ack 48 win 57600 (DF) [tos 0x10] 5.259300 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 145 win 32800 (DF) [tos 0x10] 5.272154 192.150.187.37.ssh > 192.168.1.100.32784: P 145:337(192) ack 48 win 57600 (DF) [tos 0x10] 5.272171 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 337 win 32800 (DF) [tos 0x10] 5.273873 192.150.187.37.ssh > 192.168.1.100.32784: P 337:449(112) ack 48 win 57600 (DF) [tos 0x10] 5.273887 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 449 win 32800 (DF) [tos 0x10] 5.356557 169.232.91.4.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] 6.297463 192.168.1.100.32784 > 192.150.187.37.ssh: P 48:96(48) ack 449 win 32800 (DF) [tos 0x10] 6.322221 192.150.187.37.ssh > 192.168.1.100.32784: P 449:913(464) ack 96 win 57600 (DF) [tos 0x10] 6.322267 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 913 win 32800 (DF) [tos 0x10] 6.586007 169.232.91.3.5353 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] 7.659617 192.168.1.100.32784 > 192.150.187.37.ssh: P 96:144(48) ack 913 win 32800 (DF) [tos 0x10] 7.685267 192.150.187.37.ssh > 192.168.1.100.32784: P 913:1345(432) ack 144 win 57600 (DF) [tos 0x10] 7.685313 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 1345 win 32800 (DF) [tos 0x10] 7.687175 192.150.187.37.ssh > 192.168.1.100.32784: P 1345:1569(224) ack 144 win 57600 (DF) [tos 0x10] 7.687191 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 1569 win 32800 (DF) [tos 0x10] 7.688293 192.150.187.37.ssh > 192.168.1.100.32784: P 1569:1905(336) ack 144 win 57600 (DF) [tos 0x10] 7.688307 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 1905 win 32800 (DF) [tos 0x10] 7.690644 192.150.187.37.ssh > 192.168.1.100.32784: P 1905:2033(128) ack 144 win 57600 (DF) [tos 0x10] 7.690676 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 2033 win 32800 (DF) [tos 0x10] 8.056751 192.168.1.100.32784 > 192.150.187.37.ssh: P 144:192(48) ack 2033 win 32800 (DF) [tos 0x10] 8.076302 192.150.187.37.ssh > 192.168.1.100.32784: P 2033:2289(256) ack 192 win 57600 (DF) [tos 0x10] 8.076346 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 2289 win 32800 (DF) [tos 0x10] 8.493333 192.168.1.100.32784 > 192.150.187.37.ssh: P 192:240(48) ack 2289 win 32800 (DF) [tos 0x10] 8.513129 192.150.187.37.ssh > 192.168.1.100.32784: P 2289:2401(112) ack 240 win 57600 (DF) [tos 0x10] 8.513175 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 2401 win 32800 (DF) [tos 0x10] 8.549078 192.150.187.37.ssh > 192.168.1.100.32784: P 2401:2465(64) ack 240 win 57600 (DF) [tos 0x10] 8.549104 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 2465 win 32800 (DF) [tos 0x10] 8.550636 192.150.187.37.ssh > 192.168.1.100.32784: P 2465:2545(80) ack 240 win 57600 (DF) [tos 0x10] 8.550648 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 2545 win 32800 (DF) [tos 0x10] 8.552659 192.150.187.37.ssh > 192.168.1.100.32784: P 2545:2689(144) ack 240 win 57600 (DF) [tos 0x10] 8.552673 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 2689 win 32800 (DF) [tos 0x10] 9.042851 169.232.91.138.49204 > 239.255.255.253.svrloc: udp 49 9.350216 169.232.91.3.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] 10.886386 169.232.91.4.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] 14.265149 169.232.91.138.49204 > 239.255.255.253.svrloc: udp 49 14.879888 169.232.91.3.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] 21.944978 169.232.91.4.769 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] 23.480935 169.232.91.3.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] 26.246187 169.232.91.3.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] 27.782655 169.232.91.4.1205 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] 29.309773 192.168.1.100.32801 > 216.239.53.99.http: SWE 646783667:646783667(0) win 5840 (DF) 29.323590 216.239.53.99.http > 192.168.1.100.32801: S 2865792400:2865792400(0) ack 646783668 win 8190 29.323640 192.168.1.100.32801 > 216.239.53.99.http: . ack 1 win 5840 (DF) 29.324069 192.168.1.100.32801 > 216.239.53.99.http: P 1:512(511) ack 1 win 5840 (DF) 29.341914 216.239.53.99.http > 192.168.1.100.32801: . ack 512 win 31460 [tos 0x10] 29.352608 216.239.53.99.http > 192.168.1.100.32801: P 1:1375(1374) ack 512 win 31460 [tos 0x10] 29.352646 192.168.1.100.32801 > 216.239.53.99.http: . ack 1375 win 8244 (DF) 30.854037 169.232.91.4.769 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] 31.012825 192.168.1.100.32801 > 216.239.53.99.http: P 512:979(467) ack 1375 win 8244 (DF) 31.035983 216.239.53.99.http > 192.168.1.100.32801: . 1375:2805(1430) ack 979 win 31460 [tos 0x10] 31.036030 192.168.1.100.32801 > 216.239.53.99.http: . ack 2805 win 11440 (DF) 31.037980 216.239.53.99.http > 192.168.1.100.32801: P 2805:2923(118) ack 979 win 31460 [tos 0x10] 31.037997 192.168.1.100.32801 > 216.239.53.99.http: . ack 2923 win 11440 (DF) 31.042256 216.239.53.99.http > 192.168.1.100.32801: . 2923:4353(1430) ack 979 win 31460 [tos 0x10] 31.042275 192.168.1.100.32801 > 216.239.53.99.http: . ack 4353 win 14300 (DF) 31.045641 216.239.53.99.http > 192.168.1.100.32801: . 4353:5783(1430) ack 979 win 31460 [tos 0x10] 31.045665 192.168.1.100.32801 > 216.239.53.99.http: . ack 5783 win 17160 (DF) 31.047532 216.239.53.99.http > 192.168.1.100.32801: P 5783:7115(1332) ack 979 win 31460 [tos 0x10] 31.047547 192.168.1.100.32801 > 216.239.53.99.http: . ack 7115 win 20020 (DF) 31.050288 216.239.53.99.http > 192.168.1.100.32801: . 7115:8545(1430) ack 979 win 31460 [tos 0x10] 31.050303 192.168.1.100.32801 > 216.239.53.99.http: . ack 8545 win 22880 (DF) 31.058116 216.239.53.99.http > 192.168.1.100.32801: . 8545:9975(1430) ack 979 win 31460 [tos 0x10] 31.058418 192.168.1.100.32801 > 216.239.53.99.http: . ack 9975 win 25740 (DF) 31.058381 216.239.53.99.http > 192.168.1.100.32801: P 9975:10139(164) ack 979 win 31460 [tos 0x10] 31.058711 192.168.1.100.32801 > 216.239.53.99.http: . ack 10139 win 28600 (DF) 31.383741 192.168.1.100.32801 > 216.239.53.99.http: P 979:1409(430) ack 10139 win 28600 (DF) 31.411888 216.239.53.99.http > 192.168.1.100.32801: . 10139:11569(1430) ack 1409 win 31460 [tos 0x10] 31.411934 192.168.1.100.32801 > 216.239.53.99.http: . ack 11569 win 31460 (DF) 31.412307 216.239.53.99.http > 192.168.1.100.32801: P 11569:11754(185) ack 1409 win 31460 [tos 0x10] 31.412505 192.168.1.100.32801 > 216.239.53.99.http: . ack 11754 win 31460 (DF) 35.154493 169.232.91.3.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] 36.690483 169.232.91.4.49165 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1] %expect OUT2 1.056252 169.232.91.64.1040 > 239.255.255.250.1900:{{ +}}udp 90 [ttl 1] 2.898617 169.232.91.4.771 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] 3.513694 169.232.91.3.769 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] 3.514941 169.232.91.138.49204 > 239.255.255.253.427:{{ +}}udp 49 5.226619 192.168.1.100.32784 > 192.150.187.37.22: P 760650054:760650102(48) ack 300852684 win 32800 (DF) [tos 0x10] 5.246758 192.150.187.37.22 > 192.168.1.100.32784: P 1:81(80) ack 48 win 57600 (DF) [tos 0x10] 5.246805 192.168.1.100.32784 > 192.150.187.37.22: . ack 81 win 32800 (DF) [tos 0x10] 5.259281 192.150.187.37.22 > 192.168.1.100.32784: P 81:145(64) ack 48 win 57600 (DF) [tos 0x10] 5.259300 192.168.1.100.32784 > 192.150.187.37.22: . ack 145 win 32800 (DF) [tos 0x10] 5.272154 192.150.187.37.22 > 192.168.1.100.32784: P 145:337(192) ack 48 win 57600 (DF) [tos 0x10] 5.272171 192.168.1.100.32784 > 192.150.187.37.22: . ack 337 win 32800 (DF) [tos 0x10] 5.273873 192.150.187.37.22 > 192.168.1.100.32784: P 337:449(112) ack 48 win 57600 (DF) [tos 0x10] 5.273887 192.168.1.100.32784 > 192.150.187.37.22: . ack 449 win 32800 (DF) [tos 0x10] 5.356557 169.232.91.4.771 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] 6.297463 192.168.1.100.32784 > 192.150.187.37.22: P 48:96(48) ack 449 win 32800 (DF) [tos 0x10] 6.322221 192.150.187.37.22 > 192.168.1.100.32784: P 449:913(464) ack 96 win 57600 (DF) [tos 0x10] 6.322267 192.168.1.100.32784 > 192.150.187.37.22: . ack 913 win 32800 (DF) [tos 0x10] 6.586007 169.232.91.3.5353 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] 7.659617 192.168.1.100.32784 > 192.150.187.37.22: P 96:144(48) ack 913 win 32800 (DF) [tos 0x10] 7.685267 192.150.187.37.22 > 192.168.1.100.32784: P 913:1345(432) ack 144 win 57600 (DF) [tos 0x10] 7.685313 192.168.1.100.32784 > 192.150.187.37.22: . ack 1345 win 32800 (DF) [tos 0x10] 7.687175 192.150.187.37.22 > 192.168.1.100.32784: P 1345:1569(224) ack 144 win 57600 (DF) [tos 0x10] 7.687191 192.168.1.100.32784 > 192.150.187.37.22: . ack 1569 win 32800 (DF) [tos 0x10] 7.688293 192.150.187.37.22 > 192.168.1.100.32784: P 1569:1905(336) ack 144 win 57600 (DF) [tos 0x10] 7.688307 192.168.1.100.32784 > 192.150.187.37.22: . ack 1905 win 32800 (DF) [tos 0x10] 7.690644 192.150.187.37.22 > 192.168.1.100.32784: P 1905:2033(128) ack 144 win 57600 (DF) [tos 0x10] 7.690676 192.168.1.100.32784 > 192.150.187.37.22: . ack 2033 win 32800 (DF) [tos 0x10] 8.056751 192.168.1.100.32784 > 192.150.187.37.22: P 144:192(48) ack 2033 win 32800 (DF) [tos 0x10] 8.076302 192.150.187.37.22 > 192.168.1.100.32784: P 2033:2289(256) ack 192 win 57600 (DF) [tos 0x10] 8.076346 192.168.1.100.32784 > 192.150.187.37.22: . ack 2289 win 32800 (DF) [tos 0x10] 8.493333 192.168.1.100.32784 > 192.150.187.37.22: P 192:240(48) ack 2289 win 32800 (DF) [tos 0x10] 8.513129 192.150.187.37.22 > 192.168.1.100.32784: P 2289:2401(112) ack 240 win 57600 (DF) [tos 0x10] 8.513175 192.168.1.100.32784 > 192.150.187.37.22: . ack 2401 win 32800 (DF) [tos 0x10] 8.549078 192.150.187.37.22 > 192.168.1.100.32784: P 2401:2465(64) ack 240 win 57600 (DF) [tos 0x10] 8.549104 192.168.1.100.32784 > 192.150.187.37.22: . ack 2465 win 32800 (DF) [tos 0x10] 8.550636 192.150.187.37.22 > 192.168.1.100.32784: P 2465:2545(80) ack 240 win 57600 (DF) [tos 0x10] 8.550648 192.168.1.100.32784 > 192.150.187.37.22: . ack 2545 win 32800 (DF) [tos 0x10] 8.552659 192.150.187.37.22 > 192.168.1.100.32784: P 2545:2689(144) ack 240 win 57600 (DF) [tos 0x10] 8.552673 192.168.1.100.32784 > 192.150.187.37.22: . ack 2689 win 32800 (DF) [tos 0x10] 9.042851 169.232.91.138.49204 > 239.255.255.253.427:{{ +}}udp 49 9.350216 169.232.91.3.771 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] 10.886386 169.232.91.4.771 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] 14.265149 169.232.91.138.49204 > 239.255.255.253.427:{{ +}}udp 49 14.879888 169.232.91.3.771 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] 21.944978 169.232.91.4.769 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] 23.480935 169.232.91.3.771 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] 26.246187 169.232.91.3.771 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] 27.782655 169.232.91.4.1205 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] 29.309773 192.168.1.100.32801 > 216.239.53.99.80: SWE 646783667:646783667(0) win 5840 (DF) 29.323590 216.239.53.99.80 > 192.168.1.100.32801: S 2865792400:2865792400(0) ack 646783668 win 8190 29.323640 192.168.1.100.32801 > 216.239.53.99.80: . ack 1 win 5840 (DF) 29.324069 192.168.1.100.32801 > 216.239.53.99.80: P 1:512(511) ack 1 win 5840 (DF) 29.341914 216.239.53.99.80 > 192.168.1.100.32801: . ack 512 win 31460 [tos 0x10] 29.352608 216.239.53.99.80 > 192.168.1.100.32801: P 1:1375(1374) ack 512 win 31460 [tos 0x10] 29.352646 192.168.1.100.32801 > 216.239.53.99.80: . ack 1375 win 8244 (DF) 30.854037 169.232.91.4.769 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] 31.012825 192.168.1.100.32801 > 216.239.53.99.80: P 512:979(467) ack 1375 win 8244 (DF) 31.035983 216.239.53.99.80 > 192.168.1.100.32801: . 1375:2805(1430) ack 979 win 31460 [tos 0x10] 31.036030 192.168.1.100.32801 > 216.239.53.99.80: . ack 2805 win 11440 (DF) 31.037980 216.239.53.99.80 > 192.168.1.100.32801: P 2805:2923(118) ack 979 win 31460 [tos 0x10] 31.037997 192.168.1.100.32801 > 216.239.53.99.80: . ack 2923 win 11440 (DF) 31.042256 216.239.53.99.80 > 192.168.1.100.32801: . 2923:4353(1430) ack 979 win 31460 [tos 0x10] 31.042275 192.168.1.100.32801 > 216.239.53.99.80: . ack 4353 win 14300 (DF) 31.045641 216.239.53.99.80 > 192.168.1.100.32801: . 4353:5783(1430) ack 979 win 31460 [tos 0x10] 31.045665 192.168.1.100.32801 > 216.239.53.99.80: . ack 5783 win 17160 (DF) 31.047532 216.239.53.99.80 > 192.168.1.100.32801: P 5783:7115(1332) ack 979 win 31460 [tos 0x10] 31.047547 192.168.1.100.32801 > 216.239.53.99.80: . ack 7115 win 20020 (DF) 31.050288 216.239.53.99.80 > 192.168.1.100.32801: . 7115:8545(1430) ack 979 win 31460 [tos 0x10] 31.050303 192.168.1.100.32801 > 216.239.53.99.80: . ack 8545 win 22880 (DF) 31.058116 216.239.53.99.80 > 192.168.1.100.32801: . 8545:9975(1430) ack 979 win 31460 [tos 0x10] 31.058418 192.168.1.100.32801 > 216.239.53.99.80: . ack 9975 win 25740 (DF) 31.058381 216.239.53.99.80 > 192.168.1.100.32801: P 9975:10139(164) ack 979 win 31460 [tos 0x10] 31.058711 192.168.1.100.32801 > 216.239.53.99.80: . ack 10139 win 28600 (DF) 31.383741 192.168.1.100.32801 > 216.239.53.99.80: P 979:1409(430) ack 10139 win 28600 (DF) 31.411888 216.239.53.99.80 > 192.168.1.100.32801: . 10139:11569(1430) ack 1409 win 31460 [tos 0x10] 31.411934 192.168.1.100.32801 > 216.239.53.99.80: . ack 11569 win 31460 (DF) 31.412307 216.239.53.99.80 > 192.168.1.100.32801: P 11569:11754(185) ack 1409 win 31460 [tos 0x10] 31.412505 192.168.1.100.32801 > 216.239.53.99.80: . ack 11754 win 31460 (DF) 35.154493 169.232.91.3.771 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] 36.690483 169.232.91.4.49165 > 224.0.0.2.1985:{{ +(\[\|hsrp\]|udp 20)}} [tos 0xc0] [ttl 1] %ignore !.* %eof