Add way to export mass amounts of pcap data from SO2 #4163
-
|
Would like to see a better option then stenoread to export TBs of pcap data into separate pcap files |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 1 reply
-
|
You would need to request that feature from the google team. Currently, stenoread is the only method to read the indexed PCAP. Indexed PCAP allows SO to pull PCAPs in a fast and reliable way. Searching over raw PCAP in the previous version of SO had many limitations and issues especially when it was capturing on busy sensors. |
Beta Was this translation helpful? Give feedback.
-
|
What exactly is the use case here? |
Beta Was this translation helpful? Give feedback.
-
|
Exporting pcap to network tools that are standalone |
Beta Was this translation helpful? Give feedback.
You would need to request that feature from the google team. Currently, stenoread is the only method to read the indexed PCAP. Indexed PCAP allows SO to pull PCAPs in a fast and reliable way. Searching over raw PCAP in the previous version of SO had many limitations and issues especially when it was capturing on busy sensors.