Actions
Feature #4390
openRead pcap from standard in with "-r -"
Effort:
Difficulty:
Label:
Description
It would be handy if Suricata could read from stdin. Conventionally, this can be indicated by passing "-" as the file name. Tools in this space (Zeek and tcpdump come to mind and libpcap supports it) commonly do this.
Actions