-
Notifications
You must be signed in to change notification settings - Fork 1
Parse a tcpdump capture file and convert it into SQL table rows.
License
cosmotron/dump-sql
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
DUMP-SQL 0.1 About: dump-sql parses a tcpdump packet capture file and converts each packet into a series of SQL rows. It can connect to a MySQL database and send insert statements or dump them to a file if the database is not accessible remotely. Since this was written for a project, it is a bit underfeatured. For instance, the only transport layer protocol it supports is TCP, actual packet payloads are ignored, and it can only connect to MySQL specifically. It separates each packet's ethernet, ip, and tcp headers into tables of the same names. Each table's schema matches the appropriate header's structure plus an extra column to identify the packet. This is particularly helpful if you would like to join the tables. Prerequisites: dump-sql was built using the following libraries: - libpcap 1.0.0 - MySQL 5.1.37 Building: To build dump-sql, simply run: make Usage: Before running, make sure you create a database that uses the schema as defined by schema.sql, as this is what the program is expecting the layout to be. Running ./dump-sql with no arguments will produce a small help output.
About
Parse a tcpdump capture file and convert it into SQL table rows.
Resources
License
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published