pcapfile
Loads packets from a PCAP file.
Syntax
pcapfile FILE_PATH
Required Parameter
FILE_PATH
- Path to the file from which you want to load the data. If you use a wildcard (
*
) in the file name, you can load all files containing a specific string pattern in the file name at once. To load the file, the Logpresso daemon must have the read permission to the file.
Description
This returns the packet binary to the payload field. This command is used to load the PCAP file and then pass it to decodedhcp, decodedns, decodehttp, decodesflow, pcapdecode and the like, which are commands for processing packets.