PCAP
13 min
the swimlane pcap connector allows turbine to analyze, extract ips, and carve ips from pcap files prerequisites the swimlane pcap connector does not require an asset capabilities the swimlane pcap connector has the following capabilities analyze pcap carve ips from string extract ip's from pcap actions analyze pcap extract packet metadata from pcap file input argument name type required description attachments array required pcap file attachments file name string required name of the resource attachments file string required parameter for analyze pcap limit number optional maximum number of packets to return input example {"limit" 10} output parameter type description packets array output field packets packets destination ip string output field packets destination ip packets destination mac string output field packets destination mac packets protocol string output field packets protocol packets source ip string output field packets source ip packets source mac string output field packets source mac packets timestamp string output field packets timestamp output example {"packets" \[{"destination ip" "172 16 1 240","destination mac" "3e 43\ a7\ db 7e 91","protocol" "ip","source ip" "172 16 1 24","source mac" "00 18 8b\ f8 99 35","timestamp" "1340742238 018522"}]} carve ips parse input text for all ip addresses input argument name type required description input text string required comma separated ip addresses input example {"input text" "we have this 192 168 1 1 ip address"} output parameter type description ips array output field ips output example {"ips" \[]} extract ips pcap find and return all source and dest ips found in pcap input argument name type required description attachments array required pcap file txt attachments file name string required name of the resource attachments file string required parameter for extract ips pcap limit number optional maximum number of packets to return input example {"limit" 100} output parameter type description ips array output field ips output example {"ips" \[]} response headers header description example content type the media type of the resource application/json date the date and time at which the message was originated thu, 01 jan 2024 00 00 00 gmt