In memory of Ray Dassen (JHM)
It's unfortunately very official now, our beloved Red Hat colleague and friend Ray Dassen has passed away. I still can't believe it, as we had just spent a week in Brno together less than a month ago. I will always remember him. JHM++
Here is a little a little gem we (*) came up with some weeks ago while debugging some strace outputs.
Given a strace line like the following:
recvfrom(5, "r\33\205\200\0\1\0\1\0\0\0\0\tboxen1222\4corp\6foobar\3com\0\0\1\0\1\300\f\0\1\0\ 1\0\0\16\20\0\4\n\351\360\26", 1024, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr(" 10.10.1.1")}, [16]) = 59
You can feed it to tshark with the following:
printf "\336\316\205\200\0\1\0\1\0\0\0\0\tboxen1222\4corp\6foobar\3com\0\0\1\0\1\300\f\0\1\0\1\0\0\16\20\0\4\n\351\360\26" | \ od -Ax -tx1 -v | text2pcap -d -u 53,6666 - /tmp/tmp.pcap && tshark -x -V -r /tmp/tmp.pcap
(*) By "we" I really mean Ray