4.5. Importing a PCAP file
How to create a new context by importing PCAP (packet capture) dumps.
4.5.1 trisulctl_probe importpcap
Logon to the Trisul-Probe node where you have the PCAP dumps and run the following command.
trisulctl_probe importpcap /home/trisul/dumps/MassivePacket.pcap context=mass1
This command does the following
- if a context called mass1 does not exist; creates it
- if mass1 exists, it cleans it (ask you permission first)
- runs the PCAP through trisulctl_probe and into the context mass1
- to view results ; logon to Web Trisul and in the login screen select mass1