search

fmadio / pcap2erf

High performance PCAP usec and nanosec to ERF file format conversion
MIT License
0 stars 1 forks source link

pcap2erf #1

Closed fmadio closed 3 years ago

fmadio commented 3 years ago

need to convert a standard nanosecond PCAP into an ERF file format.

input is via stdin output via stdout

needs to be singled threaded

amaan-fmad commented 3 years ago

Done - verified with Wireshark on some PCAPs with both usec/nano as magic, and with stream_cat ... | ./pcap2erf > sample.erf. Supports PCAPs recorded on reverse-endianness too (i.e. different hosts).

Let me know if there's anything missing/more required! (Support for interrupt ^C cleanly, etc.?)