Project

General

Profile

Actions

Feature #8132

open
AI CT

Add decompression support to pcap-file capture method

Feature #8132: Add decompression support to pcap-file capture method

Added by Ambre Iooss 9 months ago. Updated 15 days ago.

Status:
Triaged
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

Suricata can produce pcap.xz files, but can only read uncompressed pcap files.
When dealing with large datasets of pcap, it can be useful to be able to load them directly in Suricata without having to decompress them beforehand.

PC Updated by Pierre Chifflier 9 months ago Actions #1

Just adding a +1 on this
I'd be interested in both using this feature, and maybe volunteering to implement it :)

PA Updated by Philippe Antoine 15 days ago Actions #2

  • Status changed from New to Triaged
  • Assignee set to Community Ticket
Actions

Also available in: PDF Atom