Project

General

Profile

Actions

Feature #8132

open
AI CT

Add decompression support to pcap-file capture method

Feature #8132: Add decompression support to pcap-file capture method

Added by Ambre Iooss 10 months ago. Updated about 1 month ago.

Status:
Triaged
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

Suricata can produce pcap.xz files, but can only read uncompressed pcap files.
When dealing with large datasets of pcap, it can be useful to be able to load them directly in Suricata without having to decompress them beforehand.

PC Updated by Pierre Chifflier 10 months ago Actions #1

Just adding a +1 on this
I'd be interested in both using this feature, and maybe volunteering to implement it :)

PA Updated by Philippe Antoine about 1 month ago Actions #2

  • Status changed from New to Triaged
  • Assignee set to Community Ticket
Actions

Also available in: PDF Atom