pcapper

Documentation

Overview

Package pcapper provides a facility for continually capturing pcaps at the ip level and then dumping those for specific IPs when the time comes.

Index

• func Dump(ip string, comment string)
• func DumpAll(comment string)
• func StartCapturing(application string, interfaceName string, dir string, numIPs int, ...) error

Functions

func Dump

func Dump(ip string, comment string)

Dump dumps captured packets to/from the given ip to disk.

func DumpAll

func DumpAll(comment string)

DumpAll dumps all captured packets for all ips to disk.

func StartCapturing

func StartCapturing(application string, interfaceName string, dir string, numIPs int, packetsPerIP int, snapLen int, timeout time.Duration) error

StartCapturing starts capturing packets from the named network interface. It will dump packets into files at <dir>/<ip>.pcap. It will store data for up to <numIPs> of the most recently active IPs in memory, and it will store up to <packetsPerIP> packets per IP. snapLen specifies the maximum packet length to capture and timeout specifies the capture timeout.