Skip to content
Embulk plugin for pcapng Files input (obsoletes embulk-plugin-input-pcapng-files)
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
lib/embulk/input
.gitignore init Feb 23, 2015
Gemfile init Feb 23, 2015
LICENSE.txt init Feb 23, 2015
README.md
Rakefile
embulk-input-pcapng-files.gemspec add timestamp type field, use_basename Dec 20, 2015

README.md

Pcapng Files input plugin for Embulk

embulk plugin for pcapng files input.

Obsoletes enukane/embulk-plugin-input-pcapng-files

Overview

  • Plugin type: input
  • Load all or nothing: yes
  • Resume supported: no

Configuration

Original options

name type required? default description
paths array required [] paths where pcapng files exist (no recursive searching
convertdot string optional nil convert "." in field name (for outputing into DB who doesn't accept "dot" in schema)
use_basename bool optional false use basename (w/o ext) as "path" value
schema array of field hash required nil list of field to extract from pcapng file
field hash hash ({name, type}) required nil "name" matches field name for tshakr (-e), "type" should be "long", "double", "string", "timestamp"

Example

in:
  type: pcapng_files
  paths: [ /Users/enukane/Desktop/emtestpcap/ ]
  convertdot: "__"
  threads: 2
  schema:
    - { name: frame.number,                 type: long }
    - { name: frame.time_epoch,             type: timestamp }
    - { name: frame.len,                    type: long }
    - { name: wlan_mgt.ssid,                type: string }

Build

$ rake
You can’t perform that action at this time.