Project

General

Profile

Actions
Copy link

Feature #1952

closed
DH

allow pcap reading from stdin

Feature #1952: allow pcap reading from stdin

Added by Duane Howard almost 10 years ago. Updated almost 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:

Description

It would be really nice to be able to allow reading pcaps from stdin, this would avoid the need to be able to make the open() syscall for arbitrary files (which is required for socket command read now)

VJ Updated by Victor Julien over 9 years ago Actions
Copy link
 #1

  • Assignee set to Anonymous
  • Target version set to TBD

AV Updated by Anthony Verez almost 9 years ago Actions
Copy link
 #2

Hey there, I'm working with Duane. We found a way to work around this for our usage. Feel free to close the issue if nobody else is requesting this. Thanks!

VJ Updated by Victor Julien almost 9 years ago Actions
Copy link
 #3

As I think it could be useful for others I'll leave it open.

JI Updated by Jason Ish almost 9 years ago Actions
Copy link
 #4

I think this can be closed. "-r -" or "-r /dev/stdin" seem to work fine for reading pcaps off stdin.

Tools like pcapdj or mergecap can be used to stream multiple pcaps over stdin.

VJ Updated by Victor Julien almost 9 years ago Actions
Copy link
 #5

  • Status changed from New to Closed
  • Assignee deleted (Anonymous)
  • Target version deleted (TBD)
Actions
Copy link

Also available in: PDF Atom