PCAP (.pcap)

Background & Context

    • MIME type: application/vnd.tcpdump.pcap.
    • Network packet capture format.
    • Used to import network packet capture data.

Import

  • Import["file.pcap",elements] imports a PCAP file, returning a dataset.

Import Elements

  • General Import elements:
  • "Elements" list of elements and options available in this file
    "Rules"full list of rules for each element and option
    "Options"list of rules for options, properties and settings
  • Supported elements include:
  • "Data"dataset containing captured network packets

Examples

Basic Examples  (1)

Import a network packet capture file: