PcapConvert

Convert packet data to the standard pcap. Currently it only supports CDL(NGFW) pcap from which to convert.

Details

ID	`PcapConvert`
Language	python
From Version	6.2.0
Docker Image	`demisto/pcap-miner:1.0.0.10133006`
Tags	pcap Utility transformer

README

Convert packet data to the standard pcap. Currently it only supports CDL(NGFW) pcap from which to convert.

Script Data

Name	Description
Script Type	python3
Tags	pcap, Utility, transformer

Inputs

Argument Name	Description
value	The value to be converted from.
path	The context path to the pcap (e.g., PcapData.pcap). If you add a comma + a node name after the path, the output will be set to the node (e.g., PcapData.pcap,out).
pcap_type	The data type of the pcap data.
error_action	The action on error to parsing pcap. Possible values are abort (default), ignore, and keep.

Outputs

There are no outputs for this script.

Source

PcapConvert.py PcapConvert_test.py PcapConvert.yml

Download History Raw

args:
- description: The value to be converted from.
  name: value
- description: The context path to the pcap.
  name: path
- auto: PREDEFINED
  defaultValue: auto
  description: The data type of the pcap data.
  name: pcap_type
  predefined:
  - auto
  - cdl-pcap
- auto: PREDEFINED
  defaultValue: abort
  description: The action on error to parsing pcap.
  name: error_action
  predefined:
  - abort
  - ignore
  - keep
comment: Convert packet data to the standard pcap. Currently it only supports CDL(NGFW) pcap from which to convert.
commonfields:
  id: PcapConvert
  version: -1
contentitemexportablefields:
  contentitemfields:
    fromServerVersion: ''
dockerimage: demisto/pcap-miner:1.0.0.10133006
enabled: true
name: PcapConvert
runas: DBotWeakRole
script: ''
scripttarget: 0
subtype: python3
tags:
- pcap
- Utility
- transformer
type: python
fromversion: 6.2.0
tests:
- No tests (auto formatted)