{"_id":"@tdole/pcaptorabbit","_rev":"37-cea5ec36d903fd1e8e2695551c1fe8bc","name":"@tdole/pcaptorabbit","dist-tags":{"latest":"3.1.2"},"versions":{"2.4.2":{"name":"@tdole/pcaptorabbit","version":"2.4.2","author":{"name":"Michel Verbraak"},"license":"closed","_id":"@tdole/pcaptorabbit@2.4.2","maintainers":[{"name":"npmtdole","email":"michelv@dnpa.nl"}],"bin":{"pcaptorabbit":"pcaptorabbit.js"},"dist":{"shasum":"d09177fe74050022e6414ff3e417ed767c23b3cd","tarball":"https://registry.npmjs.org/@tdole/pcaptorabbit/-/pcaptorabbit-2.4.2.tgz","fileCount":6,"integrity":"sha512-pjjTtcS9Ql1Ktkf2hhLtg5wEkfnqkqxzMcOPG+ligAV/iUooMXcatmhzoainPSySfBOQNjP9nlvALh4bMFV2Bw==","signatures":[{"sig":"MEQCIDqZ/8akLDFBlaZtoPKxrdI1L8kGa9o70JMgNYnqP8YtAiA5Ku7HogTxCVtl+OC5GPWiVgqP39ygoHxGF0RUW/sV2A==","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":37241},"main":"pcaptorabbit.js","gitHead":"21c0bdbcee54a5d227279716a70093e660f876e2","_npmUser":{"name":"npmtdole","email":"michelv@dnpa.nl"},"_npmVersion":"9.7.1","description":"pcaptorabbit ============","directories":{},"_nodeVersion":"18.14.0","dependencies":{"opts":"^2.0.2","amqplib":"^0.10.3","protobufjs":"^7.2.5","@tdole/np_libpcap":"^2.2.1","@tdole/pcapdecoder":"^3.12.1"},"descrtiption":"Move pcap packets from file to RabbitMQ","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/pcaptorabbit_2.4.2_1701850040732_0.8032829866933406","host":"s3://npm-registry-packages"}},"2.4.3":{"name":"@tdole/pcaptorabbit","version":"2.4.3","author":{"name":"Michel Verbraak"},"license":"closed","_id":"@tdole/pcaptorabbit@2.4.3","maintainers":[{"name":"npmtdole","email":"michelv@dnpa.nl"}],"bin":{"pcaptorabbit":"pcaptorabbit.js"},"dist":{"shasum":"0c396ff4369afaf6400eb1e34217668f301d4ba5","tarball":"https://registry.npmjs.org/@tdole/pcaptorabbit/-/pcaptorabbit-2.4.3.tgz","fileCount":6,"integrity":"sha512-BrtLGog++E3EcPXWG13A6kRVX9OxbUWCo54h82vY6kjMUE1X/h/I8ia8pXFHrB3NTm0KmgrDiHUszqfmZA+ZKA==","signatures":[{"sig":"MEYCIQCrDvOVnCCAqaYVIGQHfYX029SYxXuCAeQUH66/hFvt3QIhAMa3O1gpD3cpuCuUownBdNOtgeHDEiY4vwdNi0AZQ74w","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":37241},"main":"pcaptorabbit.js","gitHead":"3638e24733aafb345b35310517517fdc5f69762b","_npmUser":{"name":"npmtdole","email":"michelv@dnpa.nl"},"_npmVersion":"9.7.1","description":"pcaptorabbit ============","directories":{},"_nodeVersion":"18.14.0","dependencies":{"opts":"^2.0.2","amqplib":"^0.10.4","protobufjs":"^7.3.0","@tdole/np_libpcap":"^2.2.1","@tdole/pcapdecoder":"^3.13.1"},"descrtiption":"Move pcap packets from file to RabbitMQ","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/pcaptorabbit_2.4.3_1715589550187_0.889348283833657","host":"s3://npm-registry-packages"}},"2.4.4":{"name":"@tdole/pcaptorabbit","version":"2.4.4","author":{"name":"Michel Verbraak"},"license":"closed","_id":"@tdole/pcaptorabbit@2.4.4","maintainers":[{"name":"npmtdole","email":"michelv@dnpa.nl"}],"bin":{"pcaptorabbit":"pcaptorabbit.js"},"dist":{"shasum":"e150e0e1f9b44507a48356375ca19e0a563b20e0","tarball":"https://registry.npmjs.org/@tdole/pcaptorabbit/-/pcaptorabbit-2.4.4.tgz","fileCount":6,"integrity":"sha512-QEDr1wMbRNaPnhMaZv/+YN5ZfYe9KimwsWVa7SxeAqFk7Ykuvd/GHWHb6vgDFO9kbxcFO1vLvBD6+3TAbruOPg==","signatures":[{"sig":"MEYCIQDSboCOZE9DOsSdYbjOaXWoxEPX/KcV5XKyWFZW/B39nQIhALkpq6aPBBaXTrgOYoAzDHWTBoisDjMV+zSVDa4Y8luS","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":37241},"main":"pcaptorabbit.js","gitHead":"a6366a449739a1f2ac3d1827f2dd1207ad4cfb83","_npmUser":{"name":"npmtdole","email":"michelv@dnpa.nl"},"_npmVersion":"10.9.0","description":"pcaptorabbit ============","directories":{},"_nodeVersion":"22.11.0","dependencies":{"opts":"^2.0.2","amqplib":"^0.10.4","protobufjs":"^7.3.0","@tdole/np_libpcap":"^3.0.1","@tdole/pcapdecoder":"^3.14.0"},"descrtiption":"Move pcap packets from file to RabbitMQ","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/pcaptorabbit_2.4.4_1731501849978_0.9014236714006318","host":"s3://npm-registry-packages"}},"2.5.2":{"name":"@tdole/pcaptorabbit","version":"2.5.2","author":{"name":"Michel Verbraak"},"license":"closed","_id":"@tdole/pcaptorabbit@2.5.2","maintainers":[{"name":"npmtdole","email":"michelv@dnpa.nl"}],"bin":{"pcaptorabbit":"pcaptorabbit.js"},"dist":{"shasum":"495c2538a7ec9ea9d3257334910fdad65e131df6","tarball":"https://registry.npmjs.org/@tdole/pcaptorabbit/-/pcaptorabbit-2.5.2.tgz","fileCount":6,"integrity":"sha512-Cx0BzRld4H79/fY9oWcP7LWAOjhGMskbPwnEPEG0pFvk6fpScyq+rmOqW97vGRnEpOC3zPW5Xhg6N4m6UHmdZw==","signatures":[{"sig":"MEQCIBiXzBbmEt6xcTPKDrpgeG8Aut7Mj6Q/ITCM54laHwEzAiAJYA7TZLeFn6uisAOi1AEhJIin76GC+aTLBqs3FEYSrw==","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":37390},"main":"pcaptorabbit.js","gitHead":"ddddfc42eaf72953e04489b309834aa8f9ecee65","_npmUser":{"name":"npmtdole","email":"michelv@dnpa.nl"},"_npmVersion":"10.9.0","description":"pcaptorabbit ============","directories":{},"_nodeVersion":"22.11.0","dependencies":{"opts":"^2.0.2","amqplib":"^0.10.4","protobufjs":"^7.4.0","@tdole/np_libpcap":"^3.0.1","@tdole/pcapdecoder":"^3.14.0"},"descrtiption":"Move pcap packets from file to RabbitMQ","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/pcaptorabbit_2.5.2_1731943341072_0.8510674381229131","host":"s3://npm-registry-packages"}},"2.6.0":{"name":"@tdole/pcaptorabbit","version":"2.6.0","author":{"name":"Michel Verbraak"},"license":"closed","_id":"@tdole/pcaptorabbit@2.6.0","maintainers":[{"name":"npmtdole","email":"michelv@dnpa.nl"}],"bin":{"pcaptorabbit":"pcaptorabbit.js"},"dist":{"shasum":"0ca976505714694bf1ba7479e2f1269708d0dda7","tarball":"https://registry.npmjs.org/@tdole/pcaptorabbit/-/pcaptorabbit-2.6.0.tgz","fileCount":6,"integrity":"sha512-QERY/UHzANjRD3wtqJZi3cwCRNxMTqfCahYPY3MZRT+4nJKIYaGshVQ8S8+eI2VG41KULpLBZchlGTm6ZaoiDg==","signatures":[{"sig":"MEQCICBmi2QrllCjnQvz2/SdW1Xvj4KyARF6wNJg3QPNNiMsAiBLIVCXaO3D61jr/2maL2+lKhMqrKbFgQT7EAIC3QUERQ==","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":37390},"main":"pcaptorabbit.js","gitHead":"7ce10d5c6dc0a48e307b89f5377378a4cb428ad5","_npmUser":{"name":"npmtdole","email":"michelv@dnpa.nl"},"_npmVersion":"10.9.0","description":"pcaptorabbit ============","directories":{},"_nodeVersion":"22.11.0","dependencies":{"opts":"^2.0.2","amqplib":"^0.10.4","protobufjs":"^7.4.0","@tdole/np_libpcap":"^3.0.1","@tdole/pcapdecoder":"^3.15.0"},"descrtiption":"Move pcap packets from file to RabbitMQ","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/pcaptorabbit_2.6.0_1732795479803_0.502205489829068","host":"s3://npm-registry-packages"}},"3.1.0":{"name":"@tdole/pcaptorabbit","version":"3.1.0","author":{"name":"Michel Verbraak"},"license":"closed","_id":"@tdole/pcaptorabbit@3.1.0","maintainers":[{"name":"npmtdole","email":"michelv@dnpa.nl"}],"bin":{"pcaptorabbit":"pcaptorabbit.js"},"dist":{"shasum":"d7a665bec03cb123daf137ca2540cebabefd4c5a","tarball":"https://registry.npmjs.org/@tdole/pcaptorabbit/-/pcaptorabbit-3.1.0.tgz","fileCount":8,"integrity":"sha512-LB+itEYPZ8Mh27hXTmiCssyI/4hIF7xznUFoPRG9GGu4D0YxEuU0KNy2qlCU3Oc+CDlCTDYdwMyMDgcZriVtaw==","signatures":[{"sig":"MEUCIQCY6/wggDjoxlxrFa4UDA54Dk+j+5QA1G8n91LHpiLwAAIgOaUn7plVn55mRclHjUUrnf9001Cuw+UtYWsZue0/HUA=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":4837360},"main":"pcaptorabbit.js","gitHead":"2a1e6449c000e2663fd8e34a479e57303bbed16d","_npmUser":{"name":"npmtdole","email":"michelv@dnpa.nl"},"_npmVersion":"10.9.0","description":"pcaptorabbit ============","directories":{},"_nodeVersion":"22.11.0","dependencies":{"opts":"^2.0.2","amqplib":"^0.10.5","protobufjs":"^7.4.0","@tdole/np_libpcap":"^3.0.1","@tdole/pcapdecoder":"^3.15.0"},"descrtiption":"Move pcap packets from file to RabbitMQ","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/pcaptorabbit_3.1.0_1734011140367_0.8705219113145461","host":"s3://npm-registry-packages-npm-production"}},"3.1.1":{"name":"@tdole/pcaptorabbit","version":"3.1.1","author":{"name":"Michel Verbraak"},"license":"closed","_id":"@tdole/pcaptorabbit@3.1.1","maintainers":[{"name":"npmtdole","email":"michelv@dnpa.nl"}],"bin":{"pcaptorabbit":"pcaptorabbit.js"},"dist":{"shasum":"29b88bee9818c3abb23661f1a614f59dac60ebc9","tarball":"https://registry.npmjs.org/@tdole/pcaptorabbit/-/pcaptorabbit-3.1.1.tgz","fileCount":8,"integrity":"sha512-rZkJgIeiwGvun7qMmC2J7ejtskYzTHx1wRptIZOuyMBzoCa8GDj+WF1oGLHbrocSsHj2Ph8R2d0wyKOmylN6dA==","signatures":[{"sig":"MEUCIGT9RX3EOP4iAsea7Q1ZF/3edpfGZACP5Q7VZ5hFZfRJAiEA3A9lJuUdyPoXWShrgP3y4HzDiGU7tZDSVtumfwYMnkM=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":4837500},"main":"pcaptorabbit.js","gitHead":"cc7c84b0af15f4b86ad1c89b46ba561a7c56c4af","_npmUser":{"name":"npmtdole","email":"michelv@dnpa.nl"},"_npmVersion":"10.9.0","description":"pcaptorabbit ============","directories":{},"_nodeVersion":"22.11.0","dependencies":{"opts":"^2.0.2","amqplib":"^0.10.5","protobufjs":"^7.4.0","@tdole/np_libpcap":"^3.0.1","@tdole/pcapdecoder":"^3.15.0"},"descrtiption":"Move pcap packets from file to RabbitMQ","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/pcaptorabbit_3.1.1_1734692162800_0.6154956546316672","host":"s3://npm-registry-packages-npm-production"}},"3.1.2":{"name":"@tdole/pcaptorabbit","version":"3.1.2","descrtiption":"Move pcap packets from file to RabbitMQ","main":"pcaptorabbit.js","dependencies":{"@tdole/np_libpcap":"^3.0.1","@tdole/pcapdecoder":"^3.15.0","amqplib":"^0.10.5","opts":"^2.0.2","protobufjs":"^7.4.0"},"bin":{"pcaptorabbit":"pcaptorabbit.js"},"author":{"name":"Michel Verbraak"},"license":"closed","_id":"@tdole/pcaptorabbit@3.1.2","gitHead":"68992429902c00124bd71b108f9238ca58725c54","description":"pcaptorabbit ============","_nodeVersion":"22.11.0","_npmVersion":"10.9.0","dist":{"integrity":"sha512-g80e2vZGbdeWLbHk7lPA6IMhXB5RrkJkrmCHLyVpB7B4WwBAjbvDUDiUfMkpBA0NTXoha6fGgApCaOK9iD4ckQ==","shasum":"02e75670606ec97a8ee1ed679b28ae8e35004b0c","tarball":"https://registry.npmjs.org/@tdole/pcaptorabbit/-/pcaptorabbit-3.1.2.tgz","fileCount":8,"unpackedSize":4837534,"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQCSTjv9y/37IP2z4JQ8gsA9PdkbLQAz2e9fVRkLqfnZ6gIgYFu7qzc3BGpLkJ3EjMsn9DnAFxo4izxcyfLVsckDJ2g="}]},"_npmUser":{"name":"npmtdole","email":"michelv@dnpa.nl"},"directories":{},"maintainers":[{"name":"npmtdole","email":"michelv@dnpa.nl"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/pcaptorabbit_3.1.2_1734695943199_0.7892097451463458"},"_hasShrinkwrap":false}},"time":{"created":"2022-08-26T12:29:00.575Z","modified":"2024-12-20T11:59:03.676Z","1.0.0":"2022-08-26T12:29:00.809Z","1.1.5":"2022-09-15T08:05:49.858Z","1.2.5":"2022-10-11T10:41:39.323Z","1.2.6":"2022-10-17T09:19:02.096Z","1.2.7":"2022-11-02T08:21:46.381Z","1.3.0":"2022-11-02T09:14:30.048Z","1.4.0":"2022-11-09T11:43:54.646Z","1.5.0":"2022-11-09T11:58:47.854Z","1.8.0":"2023-04-17T07:46:07.826Z","1.10.0":"2023-05-26T10:43:30.937Z","1.12.0":"2023-08-31T12:54:36.894Z","1.16.2":"2023-08-31T12:55:05.303Z","1.18.0":"2023-09-05T08:27:15.138Z","2.3.0":"2023-09-29T08:32:57.178Z","2.4.0":"2023-10-03T07:55:52.521Z","2.4.2":"2023-12-06T08:07:20.956Z","2.4.3":"2024-05-13T08:39:10.335Z","2.4.4":"2024-11-13T12:44:10.158Z","2.5.2":"2024-11-18T15:22:21.319Z","2.6.0":"2024-11-28T12:04:39.959Z","3.1.0":"2024-12-12T13:45:40.594Z","3.1.1":"2024-12-20T10:56:03.094Z","3.1.2":"2024-12-20T11:59:03.491Z"},"author":{"name":"Michel Verbraak"},"license":"closed","description":"pcaptorabbit ============","maintainers":[{"name":"npmtdole","email":"michelv@dnpa.nl"}],"readme":"pcaptorabbit\n============\n\nWith this program you can monitor a folder for new pcap files and send the data to a RabbitMQ. Each pcap packet will become a single message in Rabbit RabbitMQ. The message is a json object with all the information about the source of the pcap packet.\n\nRequirements:\n----------------\n* NodeJS (v20.0.0 or higher).\n* Capture file must be in pcap or pcap-ng (data in 'Enhanced Packet Block' blocks) format.\n\nInstallation:\n------------\n\nThis programm also exists on the online NPM repository. Install from there with '`npm install @todle/pcaptorabbit -g`'. This will install de program '`pcaptorabbit`' globally.\n\nTo install the checkedout git repository version use the command '`npm install -g`' will install the program '`pcaptorabbit`' globally. \n\nUsage\n-------\n```bash\nUsage: pcaptorabbit [options]\nShow this help message\n    --help\nOnly process tipcp packets and split them over multiple queues based on least significant ip address byte.\n    --splitIp\nOnly process tcp packets and split them over multiple queues based on ip-port combinations.\n    --splitTcp\nOnly ouput packets to/from specified port(s) (comma separated list of port numbers)\n    --portfilter <value>\nNumber of queues to write to Quename will be '<quename>_<#>'. (Default: 1).\n    --queueCount <value>\nPath to file when it exists the processing of files is paused at the next file. Default not used.\n    --pauseFile <value>\nRabbitMq queue (Default: 10). Use -1 for indefinitly\n    --amqpReconnectTries <value>\nRabbitMq queue (Default: 20 seconds)\n    --amqpReconnectTimeout <value>\nRabbitMq queue (Default: pcap)\n    --amqpQueue <value>\nLawfull intercept ID (Default: pcap)\n    --amqpRoutingKey <value>\nRabbitMQ exchange (Default: pcap)\n    --amqpExchange <value>\nURI to amqp (RabbitMQ) host (Default: amqp://localhost)\n    --amqpHost <value>\nPath to folder to move pcap files to after an error\n    -e, --errorpath <value>\nPath to folder to move pcap files to after reading\n    -o, --outpath <value>\nPath to pcap files to read\n    -i, --inpath <value>\nRegular expression for filename(s) to find. Default: '.*'.\n    -p, --pattern <value>\nWhen processing multiple files (--inpath or --fileList) do not move file to specified out path (--outpath).\n    --doNotMoveAfterProcessing\nFile containing list of files to process. One file per line.\n    --fileList <value>\nRead only specified file\n    -f, --filename <value>\nShow extra debug info\n    -d, --debug\n```\n\nFor examle read all existing and new pcap files below \"/data/in\".\n```bash\npcaptorabbit -i \"/data/in/\" -p \".*\\\\.pcap$\" -o \"/data/out/\" -e \"/data/error/\"\n```\n\nThe \"-p\" (\"--pattern\") argument is a javascript regular expression. You must escape backslashes once if you want them to be used as a regular espression backslash and twice if you want it to be a backslash character in you regular expression. So \".\\*\\\\\\\\.pcap\\$\" becomes \".\\*\\\\.pcap\\$\" for your javascript regular expression and  \".\\*\\\\\\\\\\\\.pcap\\$\" becomes \".\\*\\\\\\\\.pcap\\$\".\n\nThe data is send packet as a protocol buffer. For the layout see the 'pcaptorabbit.proto' file.\n\nIP or TCP packet can be split over multiple RabbitMQ queues to spread the load. For this use the \"--queueCount\", \"--splitTcp\" or \"--splitIp\" options. For TCP all packets of the same session (tuple address) are send to the same queue and for IP the least significat byte of the address is used to determine the queue.\n\nWhen \"--splitTcp\" option is used yo can also use the \"--portfilter\" option to oly send TCP packets where the source or destination port is in the port filter list. Limiting the amount of data send to RabbitMQ.\n\nWhen \"--queueCount\" is 1 then data is send to the specified queue name without the count index \"&lt;queuename&gt;\". When this value is bigger than 1 then queue's are created with thename \"&lt;queuename&gt;_&lt;#&gt;\".","readmeFilename":"readme.md"}