Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

log2pcap(1) [centos man page]

LOG2PCAP(1)							   User Commands						       LOG2PCAP(1)

NAME
log2pcap - Extract network traces from Samba log files SYNOPSIS
log2pcap [-h] [-q] [logfile] [pcap_file] DESCRIPTION
This tool is part of the samba(7) suite. log2pcap reads in a samba log file and generates a pcap file (readable by most sniffers, such as ethereal or tcpdump) based on the packet dumps in the log file. The log file must have a log level of at least 5 to get the SMB header/parameters right, 10 to get the first 512 data bytes of the packet and 50 to get the whole packet. OPTIONS
-h If this parameter is specified the output file will be a hex dump, in a format that is readable by the text2pcap utility. -q Be quiet. No warning messages about missing or incomplete data will be given. logfile Samba log file. log2pcap will try to read the log from stdin if the log file is not specified. pcap_file Name of the output file to write the pcap (or hexdump) data to. If this argument is not specified, output data will be written to stdout. -?|--help Print a summary of command line options. EXAMPLES
Extract all network traffic from all samba log files: $ log2pcap < /var/log/* > trace.pcap Convert to pcap using text2pcap: $ log2pcap -h samba.log | text2pcap -T 139,139 - trace.pcap VERSION
This man page is correct for version 3 of the Samba suite. BUGS
Only SMB data is extracted from the samba logs, no LDAP, NetBIOS lookup or other data. The generated TCP and IP headers don't contain a valid checksum. SEE ALSO
text2pcap(1), ethereal(1) AUTHOR
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed. This manpage was written by Jelmer Vernooij. Samba 4.0 06/17/2014 LOG2PCAP(1)

Check Out this Related Man Page

TDBBACKUP(8)						    System Administration tools 					      TDBBACKUP(8)

NAME
tdbbackup - tool for backing up and for validating the integrity of samba .tdb files SYNOPSIS
tdbbackup [-s suffix] [-v] [-h] DESCRIPTION
This tool is part of the samba(1) suite. tdbbackup is a tool that may be used to backup samba .tdb files. This tool may also be used to verify the integrity of the .tdb files prior to samba startup or during normal operation. If it finds file damage and it finds a prior backup the backup file will be restored. OPTIONS
-h Get help information. -s suffix The -s option allows the adminisistrator to specify a file backup extension. This way it is possible to keep a history of tdb backup files by using a new suffix for each backup. -v The -v will check the database for damages (currupt data) which if detected causes the backup to be restored. COMMANDS
GENERAL INFORMATION The tdbbackup utility can safely be run at any time. It was designed so that it can be used at any time to validate the integrity of tdb files, even during Samba operation. Typical usage for the command will be: tdbbackup [-s suffix] *.tdb Before restarting samba the following command may be run to validate .tdb files: tdbbackup -v [-s suffix] *.tdb Note that Samba 4 can use .ntdb files instead, so you should use ntdbbackup on those files. Samba .tdb files are stored in various locations, be sure to run backup all .tdb file on the system. Important files includes: o secrets.tdb - usual location is in the /usr/local/samba/private directory, or on some systems in /etc/samba. o passdb.tdb - usual location is in the /usr/local/samba/private directory, or on some systems in /etc/samba. o *.tdb located in the /usr/local/samba/var directory or on some systems in the /var/cache or /var/lib/samba directories. VERSION
This man page is correct for version 3 of the Samba suite. AUTHOR
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed. The tdbbackup man page was written by John H Terpstra. Samba 3.6 06/10/2014 TDBBACKUP(8)
Man Page