search

fmadio / pcap2json

High Speed PCAP to JSON conversion utility
Other
97 stars 21 forks source link

enable both packet and flow JSON output #2

Closed fmadio closed 5 years ago

fmadio commented 5 years ago

use case is

1) blk upload packet and flow data to separate indexs

2) option to reduce the total upload bandwidth by disabling the packet data (but keep sending flow data)

flow data is ~ x100 reduction to the PCAP

packet data is ~ x4 reduction to the PCAP

fmadio commented 5 years ago

both flow and/or metadata can be pushed. Probably the flow and packet data should use seperate indexes

fmadio commented 5 years ago

now outputs both closing