Project

General

Profile

Actions
Copy link

Feature #8132

open
AI CT

Add decompression support to pcap-file capture method

Feature #8132: Add decompression support to pcap-file capture method

Added by Ambre Iooss 11 months ago. Updated 3 months ago.

Status:
Triaged
Priority:
Normal
Assignee:
Community Ticket
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Suricata can produce pcap.xz files, but can only read uncompressed pcap files.
When dealing with large datasets of pcap, it can be useful to be able to load them directly in Suricata without having to decompress them beforehand.

PC Updated by Pierre Chifflier 11 months ago Actions
Copy link
 #1

Just adding a +1 on this
I'd be interested in both using this feature, and maybe volunteering to implement it :)

PA Updated by Philippe Antoine 3 months ago Actions
Copy link
 #2

  • Status changed from New to Triaged
  • Assignee set to Community Ticket
Actions
Copy link

Also available in: PDF Atom