Differences

This shows you the differences between two versions of the page.

--- pom:input:pcap [2012/10/12 09:11] – 2001:7e8:2221:600:9471:feff:febb:91f7
+++ pom:input:pcap [2020/05/26 21:59] (current) – external edit 127.0.0.1
@@ Line 3: / Line 3: @@
 ==== Mode interface ====
 With this mode, you'll sniff packets from a specific interface. **To avoid packet loss while using input pcap, you may want to increase the nice level when running packet-o-matic.** You can also sniff from all the interfaces by specifying the interface name 'any'. When starting, it will show what output layer will be used. If you sniff from an interface, it will be either ethernet or linux_cooked for special interfaces like ppp interfaces.
-Parameters for this mode :
+Parameters for this mode :
 ^ Name ^ Default value ^ Description ^
 |interface|eth0|Interface name to sniff from or 'any' for all the interfaces.|
@@ Line 13: / Line 13: @@
 ==== Mode file ====
 In this mode, input_pcap will read its packets from a pcap file.
 Parameters for this mode :
 ^ Name ^ Default value ^ Description ^
 |file|dump.cap|Specify the file to read packets from.|
@@ Line 24: / Line 24: @@
 Parameters for this mode :
 ^ Name ^ Default value ^ Description ^
 |path|/tmp|Specify the directory to read packets from.|
-Default : /tmp
 |file_extension|.cap|Specify the extension of the files that should be processed.|
 |filter| |Have packets filtered by the kernel. Make sure you know what you are doing when using this parameter. See ''man tcpdump'' or ''man pcap-filter'' for syntax.|