7 Star 3 Fork 323

openKylin/cybersectookits

加入 Gitee
与超过 1200万 开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)
免费加入
克隆/下载
操作指南.txt 2.91 KB
一键复制 编辑 原始数据 按行查看 历史
NEWSsktwalker 提交于 2023-05-12 11:37 . update README.md.
Usage:
-------
PcapSplitter [-h] [-i filter] -f pcap_file -o output_dir -m split_method [-p split_param]
Options:
-f pcap_file : Input pcap file name
-o output_dir : The directory where the output files shall be written
-m split_method : The method to split with. Can take one of the following params:
'file-size' - split files by size in bytes
'packet-count' - split files by packet count
'client-ip' - split files by client IP, meaning all connections with
the same client IP will be in the same file
'server-ip' - split files by server IP, meaning all connections with
the same server IP will be in the same file
'server-port' - split files by server port, meaning all connections with
the same server port will be in the same file
'ip-src-dst' - split files by IP src and dst (2-tuple), meaning all connections
with the same IPs will be in the same file
'connection' - split files by connection (5-tuple), meaning all packets
of a connection will be in the same file
-p split-param : The relevant parameter for the split method:
'method = file-size' => split-param is the max size per file (in bytes).
split-param is required for this method
'method = packet-count' => split-param is the number of packet per file.
split-param is required for this method
'method = client-ip' => split-param is max number of files to open.
If not provided the default is unlimited number of files
'method = server-ip' => split-param is max number of files to open.
If not provided the default is unlimited number of files
'method = server-port' => split-param is max number of files to open.
If not provided the default is unlimited number of files
'method = ip-src-dst' => split-param is max number of files to open.
If not provided the default is unlimited number of files
'method = connection' => split-param is max number of files to open.
If not provided the default is unlimited number of files
-i filter : Apply a BPF filter, meaning only filtered packets will be counted in the split
-h : Displays this help message and exits
马建仓 AI 助手
尝试更多
代码解读
代码找茬
代码优化
1
https://gitee.com/openkylin/cybersectookits.git
git@gitee.com:openkylin/cybersectookits.git
openkylin
cybersectookits
cybersectookits
master

搜索帮助

D67c1975 1850385 1daf7b77 1850385