Project

General

Profile

Actions

Feature #4390

open

Read pcap from standard in with "-r -"

Added by Henri DF over 3 years ago. Updated over 1 year ago.

Status:
New
Priority:
Normal
Target version:
-
Effort:
Difficulty:
Label:

Description

It would be handy if Suricata could read from stdin. Conventionally, this can be indicated by passing "-" as the file name. Tools in this space (Zeek and tcpdump come to mind and libpcap supports it) commonly do this.

Actions #1

Updated by Victor Julien over 1 year ago

  • Assignee set to Community Ticket
Actions

Also available in: Atom PDF