What are the best ways to upload PCAP files from windows 10 my SOC to analyze in my Kibana? #10507
-
Hi , i should of said " from windows 10 INTO my SOC" thanks for any suggestions or advice |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
We are currently building a new feature in Security Onion to make this easier. So in the future, you'll be able to upload and import pcap files directly via the SOC web interface. In the meantime, there are many ways to secure copy (SCP) a file from Windows to Linux. One option is to use WinSCP: (If you have questions about WinSCP, please use the WinSCP forum at https://winscp.net/forum/index.php.) Once you've scp'd the file from Windows to Linux, you can then use so-import-pcap as described at: |
Beta Was this translation helpful? Give feedback.
We are currently building a new feature in Security Onion to make this easier. So in the future, you'll be able to upload and import pcap files directly via the SOC web interface.
In the meantime, there are many ways to secure copy (SCP) a file from Windows to Linux. One option is to use WinSCP:
https://winscp.net/
(If you have questions about WinSCP, please use the WinSCP forum at https://winscp.net/forum/index.php.)
Once you've scp'd the file from Windows to Linux, you can then use so-import-pcap as described at:
https://docs.securityonion.net/en/2.3/so-import-pcap.html