pcap2parq

Command line options for pcap2parq

Command Line Options

—parq-packet <filename>

Decodes the incoming PCAP file and writes out each and every packet as its own row writing the resulting PARQ file in <filename>

—parq-flow <filename>

Decodes the incoming PCAP file and writes out each flow as a single row into the PARQ file in <filename>

(WIP)

—pgm-udp-port <number>

Forces all traffic on UDP port <number> to be decoded as PGM data.

Command supports a port range (decode ports 1000 to 2000) as PGM traffic

--pgm-udp-port 1000-2000

Example Usage

Packet Data

sudo stream_cat <capture name> | pcap2parq --parq-packet /mnt/store0/tmp2/test.parq