pcap_decap

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #ai #typescript #llm #go #golang #android #machine-learning #rust #deep-learning #linux

★ 11 Open GitHub ↗

PCAP De-Encapsulation utility ERSPAN ARISTA METAMAKO IXIA

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

![Alt text](http://firmware.fmad.io/images/logo_decap.png "fmadio pcap de-encapsulation utility")

[fmadio 10G 40G 100G Packet Capture](https://fmad.io)

Fast PCAP de-encapsulation tool. Utility removes encapsulation from packets, and also updates any timestamp in the PCAP with any specialized header/footer. This provides more accurate timestamps at the ingress port instead of at the capture port.

Utility is fast, pure C and uses linux pipes. It designed for processing TB scale PCAP running  a single pass operation.

Supports:
- VLAN
- MPLS 
- VNTAG 
- VXLAN
- CAPWAP 
- GRE basic 
- ERSPAN v1 Timestamp
- ERSPAN v3 Timestamp
- Metamako TimeStamp
- Exablaze TimeStamp
- Arista DANZ TimeStamp

Experimental
- Ixia X40 Stream Packet Broker Timestamp

Roadmap:
- Ask! -> support@fmad.io

Usage:

Input is stdin

Output is stdout

Example:

cat erspan.pcap | pcap_decap > output.pcap

```
PCAP De-encapsuation : FMADIO 10G 40G 100G Packet Capture : http://www.fmad.io
pcap_decap

Command works entirely based linux input / ouput pipes.
For example:
$ cat erspan.pcap | pcap_decap > output.pcap

Options:
-v                 : verbose output
-vv                : dump every packet

Protocols:
--metamako         : assume every packet has metamako footer
--ixia             : Ixia X40 Stream. replace FCS with a TS
--arista           : Arista DANZ replace FCS with a TS

```

pcap_decap

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README