EXPORT

Purpose

Reformat the information about the IP header, protocol header, and packet data into a file with CSV format.

Format

ALLOC FILE(EXPORT) DA(EXPORT.CSV) SPACE(15 15) TRACK
 
CTRACE COMP(SYSTCPDA) SUB((TCPCS)) SHORT OPTIONS((EXPORT))

The following describe the EXPORT, EXPORT(SUMMARY), and EXPORT(DETAIL) report outputs.

EXPORT
```
Export Report
 1  124 records written to USER2.EXPORT.CSV
 2  20,168 bytes written
```
The following fields are on the EXPORT report.
1

The number of data records written to the export data set.

2

The size of the export data set.

EXPORT (SUMMARY)

"Flags ","Packet","Absolute Time  ","Rel Time","Delta Time",
"Device          ","Source          ","Destination     ",
"IpId","IpLen","Protocol  ","Summary"
"I O   ",       1,"19:49:42.788207",  0.000000,    0.000000,
"OSAQDIOLINK     ","9.67.115.17     ","9.67.115.63     ",
 17158,     78,"UDP","S=137 D=137 LEN=58"
"I O   ",      29,"19:52:21.240160",158.451952,    0.016739,
"OSAQDIOLINK     ","9.67.115.69     ","9.67.115.5      ",
  5971,     56,"ICMP","? LEN=28"
"I O   ",      37,"19:52:27.783944",164.995736,    0.000134,
"LOOPBACK        ","9.67.115.5      ","9.67.115.5      ",
   129,     56,"ICMP","? LEN=28"
"O O   ",      40,"19:52:39.284802",176.496595,    5.500260,
"OSAQDIO46       ","FEC9:C2D4::6:2900:EDC:217C","FEC9:C2D4::9:67:115:17",
    20,     60,"UDP","S=32810 D=33435 LEN=20"
"O O   ",      41,"19:52:39.284870",176.496662,    0.000067,
"OSAQDIO46       ","FEC9:C2D4::6:2900:EDC:217C","FF02::1:FF15:17",
    32,     72,"ICMPv6","ICMPv6"
"I O   ",      42,"19:52:39.285955",176.497748,    0.001085,
"OSAQDIO46       ","FEC9:C2D4::9:67:115:17","FEC9:C2D4::6:2900:EDC:217C",
    32,     72,"ICMPv6","ICMPv6"
"O O   ",      49,"19:52:58.286347",195.498140,   13.972912,
"LOOPBACK6       ","FEC9:C2D4::9:67:115:5","FEC9:C2D4::9:67:115:5",
    20,     60,"UDP","S=32810 D=33435 LEN=20"
"I O   ",      50,"19:52:58.286530",195.498323,    0.000182,
"LOOPBACK6       ","FEC9:C2D4::9:67:115:5","FEC9:C2D4::9:67:115:5",
    68,    108,"ICMPv6","ICMPv6"

The following describes fields found on the EXPORT (SUMMARY) report:

Control flags

Direction

I — Input
O — Output

A

The packet was abbreviated (used with the following fragment flags).

R: Reassembled packet.
O: The Only fragment of a packet (it is complete).
F: First fragment of a packet.
M: Middle fragment of a packet.
L: Last fragment of a packet.

T

The packet was in a tunnel.

Packet

The packet number

Absolute Time

The time stamp on the packet

Rel Time

The time from the first packet in seconds

Delta Time

The time from the previous packet in seconds

Device

The device the packet was received on or sent from

Source

The source IP address

Destination

The destination IP address

IpId

The ID number from the IP packet header

IpLen

The length of the IP packet

Protocol

The protocol from the IP packet

Summary

Additional information from the protocol header.

EXPORT (DETAIL)

"Flags ","Packet","Delta Time","Source         ",
"Destination     ","Protocol  ","Summary"
"I O   ",      10," 69.006010","9.67.115.5     ",
"9.67.115.5      ","IP"," S=9.67.115.5 D=9.67.115.5 LEN=71 ID=110"
"I O   ",      10," 69.006010","9.67.115.5     ",
"9.67.115.5      ","UDP"," S=1036 D=161 LEN=51"
"I O   ",      10," 69.006010","9.67.115.5     ",
"9.67.115.5      ","SNMP","GetRequest dpiPathNameForUnixStream.0"
"O O   ",      24,"  0.002956","9.67.115.5     ",
"9.67.115.69     ","IP"," S=9.67.115.5 D=9.67.115.69 LEN=40 ID=121"
"O O   ",      24,"  0.002956","9.67.115.5     ",
"9.67.115.69     ","UDP"," S=32810 D=33436 LEN=20"
"O O   ",      51,"  0.002695","FEC9:C2D4::9:67:115:5",
"FEC9:C2D4::9:67:115:5","IP"," S=FEC9:C2D4::9:67:115:5 D=FEC9:C2D4::9:67:115:5 LEN=60 ID=20"
"O O   ",      51,"  0.002695","FEC9:C2D4::9:67:115:5",
"FEC9:C2D4::9:67:115:5","UDP"," S=32810 D=33436 LEN=20"
"I O   ",      52,"  0.000244","FEC9:C2D4::9:67:115:5",
"FEC9:C2D4::9:67:115:5","IP"," S=FEC9:C2D4::9:67:115:5 D=FEC9:C2D4::9:67:115:5 LEN=108 ID=68"
"I O   ",      52,"  0.000244","FEC9:C2D4::9:67:115:5",
"FEC9:C2D4::9:67:115:5","ICMPv6"

The following describes fields found on the EXPORT (DETAIL) report:

Control flags

Direction

I — Input
O — Output

A

The packet was abbreviated (used with the following fragment flags).

R: Reassembled packet.
O: Only fragment of a packet (it is complete).
F: First fragment of a packet.
M: Middle fragment of a packet.
L: Last fragment of a packet.

T

The packet was in a tunnel.

Packet

The packet number.

Delta Time

The time from the previous packet in seconds.

Source

The source IP address.

Destination

The destination IP address.

Protocol

There are multiple lines about a single packet. The first line contains "IP" to identify the data in the summary field. The second line identifies information about the protocol used by the packet. The possible third line identifies the application data in the packet.

Summary

Additional information from the protocol headers or packet data.