mozillazg / ptcpdump

Process-aware, eBPF-based tcpdump
MIT License
587 stars 43 forks source link

feat(pcapng): Read interface name from pcapng file and optimize interface handling when writing #165

Closed mozillazg closed 1 month ago

mozillazg commented 1 month ago
# before
$ ptcpdump -r demo.pcapng
14:44:33.858984 curl.205562 IP XXXX

# after
$ ptcpdump -r demo.pcapng
14:44:33.858984 ens33 curl.205562 IP XXXX