Skip to content

Add fifo option to FileCapture - #621

Open
tranzmatt wants to merge 6 commits into
KimiNewt:masterfrom
tranzmatt:master
Open

Add fifo option to FileCapture#621
tranzmatt wants to merge 6 commits into
KimiNewt:masterfrom
tranzmatt:master

Conversation

@tranzmatt

Copy link
Copy Markdown

This allows FileCapture to read from a FIFO, which can be useful for parsing the kismet pcapng stream.

mkfifo /tmp/sharkfin || true
wireshark -k -i /tmp/sharkfin &
curl -N -u user:password http://localhost:2501/pcap/all_packets.pcapng > /tmp/sharkfin &

@XChikuX XChikuX left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please implement said fix

"""
for layer in self.layers:
if layer.layer_name == item:
if layer.layer_name.lower() == item:

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Change to:
if layer.layer_name.lower() == item.lower():

@KimiNewt

Copy link
Copy Markdown
Owner

There appear to be a bunch of unrelated things in this PR, please only contain the feature in the PR title.

params = super(LiveCapture, self).get_parameters(
packet_count=packet_count)
# Read directly from interfaces
for interface in self.interfaces:

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This isn't related to this PR, and there's a reason we use dumpcap and don't read directly from the interface

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants