# Install ipsumdump with Homebrew

Summarizes TCP/IP dump files into a self-describing ASCII format. Version 1.86 via Homebrew; verified from local package data.

## Install

```sh
sudo av install brew:ipsumdump
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install ipsumdump
```

  Evidence: local Homebrew formula metadata

## Package facts

- **Package key:** brew:ipsumdump
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/ipsumdump>
- **Version:** 1.86
- **Source summary:** Summarizes TCP/IP dump files into a self-describing ASCII format
- **Homepage:** <https://read.seas.harvard.edu/~kohler/ipsumdump/>
- **Upstream docs:** <https://read.seas.harvard.edu/~kohler/ipsumdump>
- **License:** MIT
- **Source archive:** <https://read.seas.harvard.edu/~kohler/ipsumdump/ipsumdump-1.86.tar.gz>
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- ipaggcreate (cli)
- ipaggmanip (cli)
- ipsumdump (cli)
- ipaggcreate (alias)
- ipaggmanip (alias)
- ipsumdump (alias)

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 1.86
- Local data: ok
- Upstream repository: https://read.seas.harvard.edu/~kohler/ipsumdump/
- info: No package-manager update timestamp was available.
- info: Release/tag comparison is only available for GitHub repositories.
## Project history and usage

ipsumdump is Eddie Kohler's packet-trace summarizer: it reads live interfaces, tcpdump/pcap files, NetFlow summaries, DAG/NLANR traces, or prior ipsumdump files and emits a self-describing ASCII packet summary.

### Project history

The project page presents ipsumdump as a traffic-analysis tool built around IP summary dumps: line-oriented output that is easy for people and scripts to process. Its companion ipaggcreate counts packet aggregates, making the package useful for trace-analysis questions such as flow-size distributions and address-discovery timing.

ipsumdump is historically tied to the Click modular router. The project page calls it the first standalone program to use Click, explains that ipsumdump builds a Click configuration from command-line options, and notes that elements written for ipsumdump were fed back into Click for other projects.

### Adoption history

The project appears to have remained a specialist research and network-measurement tool rather than a broadly adopted admin command. Its news log is full of trace-format support, timestamp precision, capture-length fixes, anonymization, payload hashing, DAG/NLANR support, and reports from networking researchers such as Vern Paxson, Mark Allman, Nicholas Weaver, and others.

Homebrew keeps ipsumdump installable as a packaged command, but formula analytics show very small usage. That fits the tool's niche: it is most valuable when someone has packet traces to reduce into stable, text-friendly fields for research or offline analysis.

### How it is used

The manual describes ipsumdump as a way to summarize IP packets into line-based ASCII output, with options for source and destination addresses, ports, timestamps, lengths, protocols, fragments, TCP flags, payload fields, anonymization, filtering, sampling, sorting, and optional tcpdump output.

Its design is particularly useful when packet data must survive shell pipelines, versioned experiments, or reproducible notebooks. Rather than keeping all analysis inside pcap readers, it lets users choose fields once and then process the result with ordinary text tools.

### Why package nerds care

ipsumdump is a package-nerd fossil in the good sense: a compact research utility that preserves a particular network-measurement workflow from the Click ecosystem. It is obscure, but it teaches why boring ASCII formats can be durable in packet-analysis pipelines.

### Timeline

- Version 1.3: Adds kernel-drop reporting for device captures.
- Version 1.25: Adds binary IPSummaryDump support.
- Version 1.55: Includes an initial ipaggcreate.
- Version 1.60: Documents a working ipaggcreate and updates internals around Click features.
- Version 1.86: Fixes UDP packet length reporting and updates Click.

### Related projects

- Click modular router is the architectural foundation used to read, filter, anonymize, and write packet streams.
- tcpdump/pcap, NetFlow summaries, DAG traces, and NLANR traces are important input formats.
- ipaggcreate and ipaggmanip are companion commands distributed with the package.

### Sources

- Homebrew formula metadata supplies package-manager availability and low-volume adoption context.
- The manual supplies command purpose, input formats, and field-level usage model.
- The project homepage supplies the overview, Click relationship, companion tools, and release-news timeline.


## Security Notes

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals

## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** ipsumdump
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable


## Related links

- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Text processing packages](https://www.automicvault.com/pkg/text-processing-tools/) - Matched text, document, or structured-data processing metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider.
- [httpflow](https://www.automicvault.com/pkg/brew/httpflow/) - Shares av.db curated category or tags: cli, networking, packet-analysis, pcap, traffic-analysis.
- [miruo](https://www.automicvault.com/pkg/brew/miruo/) - Shares av.db curated category or tags: cli, networking, packet-analysis, pcap.
- [packetq](https://www.automicvault.com/pkg/brew/packetq/) - Shares av.db curated category or tags: cli, networking, packet-analysis, pcap.
- [tcpdump](https://www.automicvault.com/pkg/brew/tcpdump/) - Shares av.db curated category or tags: cli, networking, packet-analysis, pcap.
- [ngrep](https://www.automicvault.com/pkg/brew/ngrep/) - Shares av.db curated category or tags: cli, networking, packet-analysis.
- [sngrep](https://www.automicvault.com/pkg/brew/sngrep/) - Shares av.db curated category or tags: cli, networking, packet-analysis, pcap.
- [tcpsplit](https://www.automicvault.com/pkg/brew/tcpsplit/) - Shares av.db curated category or tags: cli, networking, packet-analysis, pcap.
- [dhcpdump](https://www.automicvault.com/pkg/brew/dhcpdump/) - Shares av.db curated category or tags: cli, networking, packet-analysis, pcap.

## Combined YAML source

View the package source record on GitHub. [combined/ipsumdump.yml](https://github.com/automic-vault/db/blob/main/combined/ipsumdump.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- cross-ecosystem install command graph
