pcapfile

Loads packets from a PCAP file.

Syntax

pcapfile FILE_PATH
Required Parameter
FILE_PATH
Path to the file from which you want to load the data. If you use a wildcard (*) in the file name, you can load all files containing a specific string pattern in the file name at once. To load the file, the Logpresso daemon must have the read permission to the file.

Description

This returns the packet binary to the payload field. This command is used to load the PCAP file and then pass it to decodedhcp, decodedns, decodehttp, decodesflow, pcapdecode and the like, which are commands for processing packets.