inactive
1,775
edits
Capturing: Difference between revisions
Jump to navigation
Jump to search
no edit summary
No edit summary |
No edit summary |
||
| Line 175: | Line 175: | ||
| curl -k -u USER:PASSWORD https://allegro-mm-XXXX/API/data/modules/capture?expression=ip==10.1.2.3 > path_to/capture.pcap | | curl -k -u USER:PASSWORD https://allegro-mm-XXXX/API/data/modules/capture?expression=ip==10.1.2.3 > path_to/capture.pcap | ||
|} | |} | ||
The user name, password and hostname have to be the same that are used to access | The user name, password and hostname have to be the same that are used to access | ||
| Line 187: | Line 185: | ||
<br> | <br> | ||
== ''' It takes too long to open a PCAP file in Wireshark. What can I do?''' == | == ''' It takes too long to open a PCAP file in Wireshark. What can I do?''' == | ||
If you are in a situation where you have a huge PCAP and are just | If you are in a situation where you have a huge PCAP and are just | ||
interested in the traffic between two particular IP addresses, you can | interested in the traffic between two particular IP addresses, you can | ||