Home

Welcome to the libcap_utils wiki!

Handy Snippets;

Scenario; you have a consumer with access to measurement streams, but you need the analysis to be done else where.

On consumer (requirement that it has multiple IPs, one of them is accessible from the analysis host ; while (true) do sudo capdump -i <marc_if> | capfilter | nc -l 3333; sleep 1; done

On Analysis host; nc <consumer_ip> 3333 | capshow|capdump|etc

Danger; make sure that the data stream only contains what it should, as your 'streaming' raw data. You could add an SSH tunnel.