PCAPMiner
Common Scripts Pack.#
This Script is part of theDeprecated
Use PCAPMinerV2 instead.
Parses PCAP files and returns, the extracted files that are found, HTTP flows, and other information. PCAPMiner uses a Docker instance located on the Docker hub trorabaugh/dempcap:1.0
. To use this script, upload a PCAP file and then run PCAPMiner entryId="<your_entry_id>"
. To get the entry ID, click on the link on the top right hand corner of a file attachment.
#
Script DataName | Description |
---|---|
Script Type | python |
Tags | Utility, file, pcap |
#
InputsArgument Name | Description |
---|---|
entryId | The entryID of the file. |
demistoLibLocation | The Demisto lib location. The default is "/var/lib/demisto/". |
#
OutputsThere are no outputs for this script.