User Tools

Site Tools


Input pcap_interface

The input pcap_interface will read packets from a live network interface.


Name Type Default value Description
interfacestringFirst available interface found, often 'eth0'Interface to read packets from.
promiscboolnoEnable reading packets in promiscious mode.
bpf_filterstring<empty>Specify the Berkley packet filter to use.
buff_sizeuint3216777216PCAP ring buffer size.
pom-ng/input/pcap_interface.txt · Last modified: 2020/05/26 21:59 by