Feature #1952
closed
allow pcap reading from stdin
Added by Duane Howard about 8 years ago.
Updated about 7 years ago.
Description
It would be really nice to be able to allow reading pcaps from stdin, this would avoid the need to be able to make the open() syscall for arbitrary files (which is required for socket command read now)
- Assignee set to Anonymous
- Target version set to TBD
Hey there, I'm working with Duane. We found a way to work around this for our usage. Feel free to close the issue if nobody else is requesting this. Thanks!
As I think it could be useful for others I'll leave it open.
I think this can be closed. "-r -" or "-r /dev/stdin" seem to work fine for reading pcaps off stdin.
Tools like pcapdj or mergecap can be used to stream multiple pcaps over stdin.
- Status changed from New to Closed
- Assignee deleted (
Anonymous)
- Target version deleted (
TBD)
Also available in: Atom
PDF