Docs

Packet capture

Handler type: pcap

Example of policy with input pcap and handler PCAP

handlers:
  window_config:
    deep_sample_rate: 100
    num_periods: 8
  modules:
    default_pcap:
      type: pcap
      config:
        topn_count: 25
input:
  input_type: pcap
  tap: default_pcap
  filter:
    bpf: net 192.168.1.0/24
  config:
    iface: wlo1
    host_spec: 192.168.1.0/24
    pcap_source: libpcap
    debug: true
kind: collection

Metrics Group

Filters

  • No filters available.

Configurations

  • Abstract configurations.
  • recorded_stream. Marks the stream as a recording rather than live traffic. Presence-based: setting it to false still enables it, so omit the key to disable.

On this page