Feature #4390
Read pcap from standard in with "-r -"
Status:
New
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:
Description
It would be handy if Suricata could read from stdin. Conventionally, this can be indicated by passing "-" as the file name. Tools in this space (Zeek and tcpdump come to mind and libpcap supports it) commonly do this.
No data to display