Project

General

Profile

Feature #4390

Read pcap from standard in with "-r -"

Added by Henri DF about 1 month ago.

Status:
New
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:

Description

It would be handy if Suricata could read from stdin. Conventionally, this can be indicated by passing "-" as the file name. Tools in this space (Zeek and tcpdump come to mind and libpcap supports it) commonly do this.

No data to display

Also available in: Atom PDF