Usage: /usr/local/bin/dnspktflow [OPTIONS] tcpdump files to analyze OPTIONS: Input Packet Selection: -i STRING A regular expression of host names to ignore in the query/response fields -r STRING A regular expression of host names to analyze in the query/response fields -f Display the packet frame numbers -b INTEGER Begin at packet frame NUMBER Output File Options: -o STRING Output file name (default: out%03d.png as png format) --fig Output format should be fig -O STRING Save tshark output to this file -m One picture per request (use %03d in the filename) -M STRING Saves a Magic Point presentation for the output Output Visualization Options: -L Only show data on the last line drawn. -z INTEGER Only show at most INTEGER connections. -T The input file is already processed by tshark Graphical Options: -t Shows message type in result image -q Shows query questions in result image -a Shows query answers in result image -A Shows authoritative information in result image -x Shows additional information in result image -l Shows lines attaching labels to lines --fontsize=INTEGER Font Size Debugging: -d Dump data collected from the packets -h Show help for command line options Help Options: -h Display help options -- short flags preferred --help Display help options -- long flags preferred --help-full Display all help options -- short and long --version Display the version number