Skip to content

Parse a tcpdump capture file and convert it into SQL table rows.

License

Notifications You must be signed in to change notification settings

cosmotron/dump-sql

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

DUMP-SQL 0.1

About:
        dump-sql parses a tcpdump packet capture file and converts each packet
        into a series of SQL rows.  It can connect to a MySQL database and send
        insert statements or dump them to a file if the database is not
        accessible remotely.

        Since this was written for a project, it is a bit underfeatured.  For
        instance, the only transport layer protocol it supports is TCP, actual
        packet payloads are ignored, and it can only connect to MySQL
        specifically.

        It separates each packet's ethernet, ip, and tcp headers into tables
        of the same names.  Each table's schema matches the appropriate
        header's structure plus an extra column to identify the packet.  This
        is particularly helpful if you would like to join the tables.

Prerequisites:
        dump-sql was built using the following libraries:
        - libpcap 1.0.0
        - MySQL 5.1.37

Building:
        To build dump-sql, simply run: make

Usage:
        Before running, make sure you create a database that uses the schema as
        defined by schema.sql, as this is what the program is expecting the
        layout to be.

        Running ./dump-sql with no arguments will produce a small help output.

About

Parse a tcpdump capture file and convert it into SQL table rows.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages