The input pcap_interface will read packets from a live network interface.
Name | Type | Default value | Description |
---|---|---|---|
interface | string | First available interface found, often 'eth0' | Interface to read packets from. |
promisc | bool | no | Enable reading packets in promiscious mode. |
bpf_filter | string | <empty> | Specify the Berkley packet filter to use. |
buff_size | uint32 | 16777216 | PCAP ring buffer size. |