Table of Contents

Class PcapMerge

Namespace
Fluxzy.Core.Pcap.Pcapng.Merge
Assembly
Fluxzy.Core.Pcap.dll

PcapMerge is an utility helper for combining multiple pcap streams to a single one. This implementation is intended only for merging pcap files produced by fluxzy and does not cover pcap files that comes from other sources. If it's the goal you want, you should consider using mergecap (https://gitlab.com/wireshark/wireshark/-/blob/master/mergecap.c)

public static class PcapMerge
Inheritance
PcapMerge
Inherited Members

Methods

Merge(IEnumerable<IStreamSource>, IEnumerable<IStreamSource>, Stream, int)

Merge from StreamSoruce

public static void Merge(IEnumerable<IStreamSource> pcapFiles, IEnumerable<IStreamSource> nssKeyLogs, Stream outStream, int maxConcurrentOpenFile = 20)

Parameters

pcapFiles IEnumerable<IStreamSource>
nssKeyLogs IEnumerable<IStreamSource>
outStream Stream
maxConcurrentOpenFile int

Merge(IEnumerable<FileInfo>, IEnumerable<FileInfo>, Stream, int)

Merge from provided files

public static void Merge(IEnumerable<FileInfo> pcapFiles, IEnumerable<FileInfo> nssKeyLogs, Stream outStream, int maxConcurrentOpenFile = 20)

Parameters

pcapFiles IEnumerable<FileInfo>
nssKeyLogs IEnumerable<FileInfo>
outStream Stream
maxConcurrentOpenFile int

MergeArchive(string, Stream, HashSet<int>?)

Merge from a fluxzy dump directory

public static void MergeArchive(string archiveFile, Stream outStream, HashSet<int>? connectionIds = null)

Parameters

archiveFile string
outStream Stream
connectionIds HashSet<int>

MergeDumpDirectory(string, Stream, int, HashSet<int>?)

Merge from a fluxzy dump directory

public static void MergeDumpDirectory(string dumpDirectory, Stream outStream, int maxConcurrentOpenFile = 20, HashSet<int>? connectionIds = null)

Parameters

dumpDirectory string
outStream Stream
maxConcurrentOpenFile int
connectionIds HashSet<int>