PCAP (.pcap)

Background

    ▪ MIME type: application/vnd.tcpdump.pcap.
    ▪ Network packet capture format.
    ▪ Used to import network packet capture data.

Import and Export

  • Import["file.pcap",elements] imports a PCAP file, returning a dataset.

Elements

  • General Import elements:
  • "Elements" list of elements and options available in this file
    "Rules"full list of rules for each element and option
    "Options"list of rules for options, properties and settings
  • Supported elements include:
  • "Data"dataset containing captured network packets

Examples

Basic Examples  (1)

Import a network packet capture file:

In[1]:=
Click for copyable input
Out[1]=
Introduced in 2018
(11.3)