Actions
Feature #8132
open
AI
CT
Add decompression support to pcap-file capture method
Feature #8132:
Add decompression support to pcap-file capture method
Effort:
Difficulty:
Label:
Description
Suricata can produce pcap.xz files, but can only read uncompressed pcap files.
When dealing with large datasets of pcap, it can be useful to be able to load them directly in Suricata without having to decompress them beforehand.
Actions