[Click] FromDump format

[María Gómez]

Hello clickers!!

I have a couple of questions about the FromDump element:

1- I
have captured the traffic with tcpdump and wireshark and with 'FromDevice(ath0)-> ToDump(capture.dump)' (i use .dump and .cap),
but I don't know if the file
format is correct. That is, the format must be in some specific way? 
For example:
'time' IP 1.0.0.1.1234 > 2.0.0.2.1234 : UDP, length 80

2- Why not print IPPrint element? My configuration:

FromDump($file,STOP true, TIMING true)
    -> c::Counter            
    -> IPPrint("packet ",CONTENTS 'ASCII', ID true, TTL true, LENGTH true)                    
    -> cs::Classifier(12/0800, -)
    -> Print("IP traffic")    
    -> cip::Counter                    
    -> Strip (14)            
    -> ch::CheckIPHeader()        
    -> c2::Counter    
    -> dt::DecIPTTL            
    -> fr::IPFragmenter(1500, VERBOSE true)
    -> q::Queue(200)
    -> LinkUnqueue(0, 512 bps)
    -> q2::Queue(2)
    -> ToDevice(tun0)


cs[1] -> ccs::Counter -> Print("non-IP traffic") -> Discard;

ch[1]-> cch::Counter -> Print("Bad check") -> Discard

dt[1] -> ICMPError(18.26.4.24, timeexceeded) -> cdt::Counter -> Print("TTL exceeded")-> Discard

fr[1] -> ICMPError(127.0.0.2, unreachable, needfrag) -> cfr::Counter -> Print("Don't fragment packet")-> Discard


_________________________________________________________________
Messenger cumple 10 años ¡Descárgate ya los nuevos emoticonos!
http://www.vivelive.com/felicidades