GoogleCloudPlatform / GoogleCloudPlatform/pcap-sidecar

Feature request: PCAP-over-IP export

Open
#85 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
25
Forks
5
PR merge metrics
No merged PRs in 30d

Description

Add support for PCAP-over-IP so that PCAP files can be streamed over TCP to a recipient, such as [Arkime's PCAP-Over-IP reader](https://arkime.com/settings#reader-poi).

The simplest solution would probably be to trigger a PCAP-over-IP transfer when a PCAP file is ready for export. But it would also be fantastic if it would be possible to stream real-time packet data using PCAP-Over-IP to [Arkime](https://github.com/arkime/arkime) or other solution that supports PCAP-over-IP like [Pkappa2](https://github.com/spq/pkappa2) or [Shovel](https://github.com/FCSC-FR/shovel).

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are named in the issue. First clarify whether the goal is exporting completed PCAP files, real-time packet streaming, or both, and define the supported PCAP-over-IP recipients and completion criteria.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
networking
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.