Class PcapMerge
PcapMerge is an utility helper for combining multiple pcap streams to a single one. This implementation is intended only for merging pcap files produced by fluxzy and does not cover pcap files that comes from other sources. If it's the goal you want, you should consider using mergecap (https://gitlab.com/wireshark/wireshark/-/blob/master/mergecap.c)
public static class PcapMerge
- Inheritance
-
PcapMerge
- Inherited Members
Methods
Merge(IEnumerable<IStreamSource>, IEnumerable<IStreamSource>, Stream, int)
Merge from StreamSoruce
public static void Merge(IEnumerable<IStreamSource> pcapFiles, IEnumerable<IStreamSource> nssKeyLogs, Stream outStream, int maxConcurrentOpenFile = 20)
Parameters
pcapFilesIEnumerable<IStreamSource>nssKeyLogsIEnumerable<IStreamSource>outStreamStreammaxConcurrentOpenFileint
Merge(IEnumerable<FileInfo>, IEnumerable<FileInfo>, Stream, int)
Merge from provided files
public static void Merge(IEnumerable<FileInfo> pcapFiles, IEnumerable<FileInfo> nssKeyLogs, Stream outStream, int maxConcurrentOpenFile = 20)
Parameters
pcapFilesIEnumerable<FileInfo>nssKeyLogsIEnumerable<FileInfo>outStreamStreammaxConcurrentOpenFileint
MergeArchive(string, Stream, HashSet<int>?)
Merge from a fluxzy dump directory
public static void MergeArchive(string archiveFile, Stream outStream, HashSet<int>? connectionIds = null)
Parameters
MergeDumpDirectory(string, Stream, int, HashSet<int>?)
Merge from a fluxzy dump directory
public static void MergeDumpDirectory(string dumpDirectory, Stream outStream, int maxConcurrentOpenFile = 20, HashSet<int>? connectionIds = null)