Command Reference¶

The core CLI commands for the ACDI Sniffer. These assume the RPM install, where pqc-sniffer is on the PATH and the configuration lives at /etc/pqc-sniffer/config.yaml.

Display Help¶

pqc-sniffer --help

Display Version¶

pqc-sniffer --version

Generate a Config Interactively¶

sudo pqc-sniffer --setup --config /etc/pqc-sniffer/config.yaml

Validate a Config File¶

sudo pqc-sniffer --config /etc/pqc-sniffer/config.yaml --validate-config

Run in Foreground¶

sudo pqc-sniffer --config /etc/pqc-sniffer/config.yaml --foreground

Override the Capture Interface¶

sudo pqc-sniffer --config /etc/pqc-sniffer/config.yaml --foreground --interface eth1

Override Deployment Metadata¶

sudo pqc-sniffer \
  --config /etc/pqc-sniffer/config.yaml \
  --foreground \
  --customer-id customer-12345 \
  --sniffer-id lab-01

Notes¶

--config is required unless you are running --setup
--foreground is recommended during setup and troubleshooting; for normal operation use the systemd service (systemctl start pqc-sniffer)
--dry-run skips writes and is not the normal NDJSON workflow

Common Operator Pattern¶

sudo pqc-sniffer --config /etc/pqc-sniffer/config.yaml --validate-config
sudo pqc-sniffer --config /etc/pqc-sniffer/config.yaml --foreground
latest_output=$(ls -t /var/log/pqc-sniffer/connections*.ndjson | head -n 1)
tail -5 "$latest_output"