Metadata-Version: 2.4
Name: slicecap
Version: 0.3.0
Summary: Slice a pcap file into pieces and process in parallel
Home-page: https://github.com/keiichishima/slicecap/
Author: Keiichi SHIMA
Author-email: keiichi@iijlab.net
License: BSD License
Classifier: Development Status :: 4 - Beta
Classifier: Environment :: Console
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Information Technology
Classifier: Intended Audience :: Science/Research
Classifier: Intended Audience :: System Administrators
Classifier: License :: OSI Approved :: BSD License
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Scientific/Engineering :: Information Analysis
Classifier: Topic :: System :: Networking
Classifier: Topic :: Utilities
Requires-Python: >=3.13
License-File: LICENSE
Dynamic: author
Dynamic: author-email
Dynamic: classifier
Dynamic: description
Dynamic: home-page
Dynamic: license
Dynamic: license-file
Dynamic: requires-python
Dynamic: summary

# Slice a large pcap file and process in parallel

## Install

    python setup.py install

## Usage

The below is an example to slice a pcap file into 10 files.

    slicecap -r source.pcap -n 10 -- "cat - > dest-{SLICE_ID}.pcap"

The `-r` or `--infile` option specifies input pcap file to slice.
Stdin is not acceptable because `slicecap` will change file handle
pointer using the `seek()` method.

The `-n` or `--number` option specifies the total number of sliced
pcap files.  This default value is 2.

The `-g` or `--maxgap` option specifies the maximum time difference
(in seconds) used to compare packet timestamps to find the pcap pkthdr
boundary.  The default value is 3600.

The `-p` or `--parallel` option specifies the maximum number of
parallel subprocesses.  The default value is automatically determined
based on the number of cores of the host node.  It doesn't make sense
to specify a larger value than the number of cores.

After the `--` option, you can specify a subprocess to process the
sliced pcap data.  In the above example, the sliced data will just
redirected into files.  In the subprocess definition, you can use the
following keywords that are replaced dynamically when executed.  Since
the replacement will be done by the Python text formatting function,
you can specify formatting rules using the standard Python text
formatter syntax.

- `OFFSET`: The file offset value in bytes.
- `SIZE`: The size of the sliced pcap data.
- `SLICE_ID`: The ID number (begins from 0) of the sliced file.


## Bug Reports
Please submit bug reports or patches through the GitHub interface.

## Author
Keiichi SHIMA
/ IIJ Innovation Institute Inc.
/ WIDE project
