cramer/pcapmirror
1
0
Fork 1
mirror of https://git.freestone.net/cramer/pcapmirror.git synced 2025-12-31 03:50:27 +01:00
Code Issues Packages Projects Releases Wiki Activity

ERSPAN RELEASE

Browse Source
This commit is contained in:
Matthias Cramer
2025-04-20 16:53:26 +02:00
parent 9fcac378ae
commit c202697f7b
5 changed files with 18 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.gitlab-ci.yml
View File

@@ -5,7 +5,7 @@ stages:
variables: variables:
DEBIAN_FRONTEND: noninteractive DEBIAN_FRONTEND: noninteractive
VERSION: 0.5 VERSION: 0.6
build-bookworm: build-bookworm:
stage: build stage: build

2
README.md
View File

@@ -2,7 +2,7 @@
# pcapmirror # pcapmirror
![pcapmirror logo](logo/pcapmirror_logo_small.png) ![pcapmirror logo](logo/pcapmirror_logo_small.png)
pcapmirror is a command-line tool for capturing network traffic and mirroring it to a remote destination using [TZSP encapsulation](https://en.wikipedia.org/wiki/TZSP). It leverages the `libpcap` library for packet capture and provides options for filtering traffic based on BPF syntax. This tool is useful for network monitoring, intrusion detection, and remote packet analysis. pcapmirror is a command-line tool for capturing network traffic and mirroring it to a remote destination using [TZSP encapsulation](https://en.wikipedia.org/wiki/TZSP) or [ERSPAN](https://datatracker.ietf.org/doc/html/draft-foschiano-erspan-01). It leverages the `libpcap` library for packet capture and provides options for filtering traffic based on BPF syntax. This tool is useful for network monitoring, intrusion detection, and remote packet analysis.
## Usage ## Usage

8
debian/changelog vendored
View File

@@ -1,3 +1,11 @@
pcapmirror (0.6-1) unstable; urgency=medium
* Erspan Encapsulation support
* added option -e to set the encapsulation type
* added option -S to set ERSPAN session id
-- Matthias Cramer <cramer@freestone.net> Sun, 20 Apr 2025 16:50:00 +0200
pcapmirror (0.5-1) unstable; urgency=medium pcapmirror (0.5-1) unstable; urgency=medium
* new option -c to count matching packets (overrides verbose mode) * new option -c to count matching packets (overrides verbose mode)

4
debian/control vendored
View File

@@ -11,7 +11,7 @@ Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libpcap0.8 Depends: ${shlibs:Depends}, ${misc:Depends}, libpcap0.8
Description: A simple packet mirroring tool using libpcap Description: A simple packet mirroring tool using libpcap
pcapmirror is a command-line tool for capturing network traffic and pcapmirror is a command-line tool for capturing network traffic and
mirroring it to a remote destination using TZSP encapsulation. It mirroring it to a remote destination using TZSP or ERSPAN encapsulation.
leverages the libpcap library for packet capture and provides options It leverages the libpcap library for packet capture and provides options
for filtering traffic based on BPF syntax. This tool is useful for for filtering traffic based on BPF syntax. This tool is useful for
network monitoring, intrusion detection, and remote packet analysis. network monitoring, intrusion detection, and remote packet analysis.

8
pcapmirror.spec
View File

@@ -10,7 +10,7 @@ BuildRequires: make
BuildRequires: libpcap-devel BuildRequires: libpcap-devel
%description %description
pcapmirror is a command-line tool for capturing and mirroring network traffic using TZSP encapsulation. It leverages the `libpcap` library for packet capture and supports BPF syntax for filtering traffic. pcapmirror is a command-line tool for capturing and mirroring network traffic using TZSP or ERSPAN encapsulation. It leverages the `libpcap` library for packet capture and supports BPF syntax for filtering traffic.
%build %build
%make_build %make_build
@@ -26,7 +26,11 @@ pcapmirror is a command-line tool for capturing and mirroring network traffic us
%changelog %changelog
* Sat Mar 29 2025 Matthias Cramer <cramer@freesone.net> 0.5-1 * Sun Apr 20 2025 Matthias Cramer <cramer@freestone.net> 0.6-1
- Erspan Encapsulation support
- added option -e to set the encapsulation type
- added option -S to set ERSPAN session id
* Sat Mar 29 2025 Matthias Cramer <cramer@freestone.net> 0.5-1
- new option -c to count matching packets (overrides verbose mode) - new option -c to count matching packets (overrides verbose mode)
- reworked packet decoder to also decode arp, vlan and qinq packets - reworked packet decoder to also decode arp, vlan and qinq packets
- well known protocols numbers are now decoded - well known protocols numbers are now decoded