Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

answered 2020-07-10 17:34:47 +0000

le_top gravatar image

I did not find a solution matching my needs, so I implemented my own in perl.

It can write to: - Read 1 to many input pcap fifos (pipes); - Write 0 to many output pcap fifos (pipes); - 1 full file log; - 1 "rotating" filelog (it creates a new log after the configured delay).

The script gets the header from the input(s). The headers must be compatible (only one of the headers is used). The header is written to each output file. The header is writtent o each pipe when a slave connects on the pipe.

This allows logging on a small linux system such as a raspberry pi, beaglebone or olimex board. At the same time any local or remote tool can connect to the stream and be used for real time debugging.

Code and dense instructions: https://gist.github.com/mdeweerd/4bf3375b2ec56b5492a7a4695e19e92e

I did not find a solution matching my needs, so I implemented my own in perl.

It can write to: - Read 1 to many input pcap fifos (pipes); - Write 0 to many output pcap fifos (pipes); - 1 full file log; - 1 "rotating" filelog (it creates a new log after the configured delay).

The script gets the header from the input(s). The headers must be compatible (only one of the headers is used). The header is written to each output file. The header is writtent o each pipe when a slave connects on the pipe.

This allows logging on a small linux system such as a raspberry pi, beaglebone or olimex board. At the same time any local or remote tool can connect to the stream and be used for real time debugging.

Code and dense instructions: instructions - should work for any type of capture: https://gist.github.com/mdeweerd/4bf3375b2ec56b5492a7a4695e19e92e

I did not find a solution matching my needs, so I implemented my own in perl.

It can write to: Its: - Read 1 to many input pcap fifos (pipes); - Write 0 to many output pcap fifos (pipes); - - Writes 0 or 1 full file log; - - Writes 0 or 1 "rotating" filelog (it creates a new log after the configured delay).delay); - Allows restarting wireshark (or other tool) on the output fifo (pipe); - Allows reconnecting the input pipe (without restarting wireshark or other tool).

The script gets the header from the input(s). The headers must be compatible (only one of the headers is used). The header is written to each output file. The header is writtent o each pipe when a slave connects on the pipe.

This allows logging on a small linux system such as a raspberry pi, beaglebone or olimex board. At the same time any local or remote tool can connect to the stream and be used for real time debugging.

Code and dense instructions - should work for any type of capture: https://gist.github.com/mdeweerd/4bf3375b2ec56b5492a7a4695e19e92e

I did not find a solution matching my needs, so I implemented my own in perl.

Its: - Read It:

  • Reads 1 to many input pcap fifos (pipes); - Write (pipes);
  • Writes 0 to many output pcap fifos (pipes); - (pipes);
  • Writes 0 or 1 full file log; - log;
  • Writes 0 or 1 "rotating" filelog (it creates a new log after the configured delay); - delay);
  • Allows restarting wireshark (or other tool) on the output fifo (pipe); - (pipe);
  • Allows reconnecting the input pipe (without restarting wireshark or other tool).

The script gets the header from the input(s). The headers must be compatible (only one of the headers is used). The header is written to each output file. The header is writtent o each pipe when a slave connects on the pipe.

This allows logging on a small linux system such as a raspberry pi, beaglebone or olimex board. At the same time any local or remote tool can connect to the stream and be used for real time debugging.

Code and dense instructions - should work for any type of capture: https://gist.github.com/mdeweerd/4bf3375b2ec56b5492a7a4695e19e92e

I did not find a solution matching my needs, so I implemented my own in perl.

It:

  • Reads 1 to many input pcap fifos (pipes);
  • Writes 0 to many output pcap fifos (pipes);
  • Writes 0 or 1 full file log;
  • Writes 0 or 1 "rotating" filelog (it creates a new log after the configured delay);
  • Allows restarting wireshark (or other tool) on the output fifo (pipe);
  • Allows reconnecting the input pipe (without restarting wireshark or other tool).

The script gets the header from the input(s). The headers must be compatible (only one of the headers is used). used). The header is written to each output file. file. The header is writtent o to each pipe when a slave connects on the pipe.

This allows logging on a small linux system such as a raspberry pi, beaglebone or olimex board. At the same time any local or remote tool can connect to the stream and be used for real time debugging.

Code and dense instructions - should work for any type of capture: https://gist.github.com/mdeweerd/4bf3375b2ec56b5492a7a4695e19e92e