GoogleCloudPlatform / GoogleCloudPlatform/pcap-sidecar
Feature request: PCAP-over-IP export
- Dominant language
- Go
- Stars
- 25
- Forks
- 5
- PR merge metrics
- No merged PRs in 30d
Description
Add support for PCAP-over-IP so that PCAP files can be streamed over TCP to a recipient, such as [Arkime's PCAP-Over-IP reader](https://arkime.com/settings#reader-poi).
The simplest solution would probably be to trigger a PCAP-over-IP transfer when a PCAP file is ready for export. But it would also be fantastic if it would be possible to stream real-time packet data using PCAP-Over-IP to [Arkime](https://github.com/arkime/arkime) or other solution that supports PCAP-over-IP like [Pkappa2](https://github.com/spq/pkappa2) or [Shovel](https://github.com/FCSC-FR/shovel).
Contributor guide
Research direction
No files, tests, or entry points are named in the issue. First clarify whether the goal is exporting completed PCAP files, real-time packet streaming, or both, and define the supported PCAP-over-IP recipients and completion criteria.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- networking
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100