Project

General

Profile

Actions

Feature #2342

open

Write PCAP files directly to Unix Socket

Added by Chris Knott almost 5 years ago. Updated over 3 years ago.

Status:
New
Priority:
Normal
Target version:
Effort:
medium
Difficulty:
high
Label:

Description

In addition to the current behavior of the unix socket interface where PCAP files can be registered for processing by providing it's metadata, it should be possible to write PCAP files (a PCAP structured byte flow) directly onto a unix socket. The processing mode should be continuous (keeping engine states between submitting multiple PCAP files). Also it should be combined with multi-tenant properties (processing more than one file at a time on the unix socket).

Actions

Also available in: Atom PDF