Project

General

Profile

Actions
Copy link

Feature #4390

open
HD CT

Read pcap from standard in with "-r -"

Feature #4390: Read pcap from standard in with "-r -"

Added by Henri DF over 5 years ago. Updated about 1 month ago.

Status:
Feedback
Priority:
Normal
Assignee:
Community Ticket
Target version:
-
Effort:
Difficulty:
Label:

Description

It would be handy if Suricata could read from stdin. Conventionally, this can be indicated by passing "-" as the file name. Tools in this space (Zeek and tcpdump come to mind and libpcap supports it) commonly do this.

Related issues 1 (0 open — 1 closed)

Related to Suricata - Bug #8464: pcap-file: failure reading pcaps from stdin or named pipeClosedSamaresh Kumar singhActions

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #1

  • Assignee set to Community Ticket

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #2

  • Status changed from New to Feedback

Was this implemented/fixed in #8464 ?

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #3

  • Related to Bug #8464: pcap-file: failure reading pcaps from stdin or named pipe added
Actions
Copy link

Also available in: PDF Atom