Project

General

Profile

Actions

Feature #8132

open

Add decompression support to pcap-file capture method

Added by A. Iooss 1 day ago. Updated about 17 hours ago.

Status:
New
Priority:
Normal
Assignee:
-
Target version:
Effort:
Difficulty:
Label:

Description

Suricata can produce pcap.xz files, but can only read uncompressed pcap files.
When dealing with large datasets of pcap, it can be useful to be able to load them directly in Suricata without having to decompress them beforehand.

Actions

Also available in: Atom PDF