1 Star 0 Fork 324

wnh/cybersectookits

forked from openKylin/cybersectookits 
Create your Gitee Account
Explore and code with more than 12 million developers,Free private repositories !:)
Sign up
文件
Clone or Download
操作指南.txt 2.91 KB
Copy Edit Raw Blame History
NEWSsktwalker authored 2023-05-12 11:37 . update README.md.
Usage:
-------
PcapSplitter [-h] [-i filter] -f pcap_file -o output_dir -m split_method [-p split_param]
Options:
-f pcap_file : Input pcap file name
-o output_dir : The directory where the output files shall be written
-m split_method : The method to split with. Can take one of the following params:
'file-size' - split files by size in bytes
'packet-count' - split files by packet count
'client-ip' - split files by client IP, meaning all connections with
the same client IP will be in the same file
'server-ip' - split files by server IP, meaning all connections with
the same server IP will be in the same file
'server-port' - split files by server port, meaning all connections with
the same server port will be in the same file
'ip-src-dst' - split files by IP src and dst (2-tuple), meaning all connections
with the same IPs will be in the same file
'connection' - split files by connection (5-tuple), meaning all packets
of a connection will be in the same file
-p split-param : The relevant parameter for the split method:
'method = file-size' => split-param is the max size per file (in bytes).
split-param is required for this method
'method = packet-count' => split-param is the number of packet per file.
split-param is required for this method
'method = client-ip' => split-param is max number of files to open.
If not provided the default is unlimited number of files
'method = server-ip' => split-param is max number of files to open.
If not provided the default is unlimited number of files
'method = server-port' => split-param is max number of files to open.
If not provided the default is unlimited number of files
'method = ip-src-dst' => split-param is max number of files to open.
If not provided the default is unlimited number of files
'method = connection' => split-param is max number of files to open.
If not provided the default is unlimited number of files
-i filter : Apply a BPF filter, meaning only filtered packets will be counted in the split
-h : Displays this help message and exits
马建仓 AI 助手
尝试更多
代码解读
代码找茬
代码优化
1
https://gitee.com/wnh6207/cybersectookits.git
git@gitee.com:wnh6207/cybersectookits.git
wnh6207
cybersectookits
cybersectookits
master

Search