Skip to content
master
Switch branches/tags
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 
 
 
 
 

Pcapng Files input plugin for Embulk

embulk plugin for pcapng files input.

Obsoletes enukane/embulk-plugin-input-pcapng-files

Overview

  • Plugin type: input
  • Load all or nothing: yes
  • Resume supported: no

Configuration

Original options

name type required? default description
paths array required [] paths where pcapng files exist (no recursive searching
convertdot string optional nil convert "." in field name (for outputing into DB who doesn't accept "dot" in schema)
use_basename bool optional false use basename (w/o ext) as "path" value
schema array of field hash required nil list of field to extract from pcapng file
field hash hash ({name, type}) required nil "name" matches field name for tshakr (-e), "type" should be "long", "double", "string", "timestamp"

Example

in:
  type: pcapng_files
  paths: [ /Users/enukane/Desktop/emtestpcap/ ]
  convertdot: "__"
  threads: 2
  schema:
    - { name: frame.number,                 type: long }
    - { name: frame.time_epoch,             type: timestamp }
    - { name: frame.len,                    type: long }
    - { name: wlan_mgt.ssid,                type: string }

Build

$ rake

About

Embulk plugin for pcapng Files input (obsoletes embulk-plugin-input-pcapng-files)

Resources

License

Packages

No packages published

Languages