docker:pcap_analysis
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
docker:pcap_analysis [2018/02/27 10:58] – [Single pass only] vivek | docker:pcap_analysis [2018/03/02 17:27] (current) – [Instructions : How to run the Docker image over PCAPs] veera | ||
---|---|---|---|
Line 27: | Line 27: | ||
===== Instructions : How to run the Docker image over PCAPs ===== | ===== Instructions : How to run the Docker image over PCAPs ===== | ||
- | < | + | Put the PCAP dump into the shared docker |
- | We are assuming here that you have a Linux system with Docker installed. | + | |
- | </ | + | |
- | + | ||
- | First you need to create a //root volume//, say ''/ | + | |
< | < | ||
Line 39: | Line 35: | ||
- | + | Run the trisul6 docker image on the PCAP | |
- | Run the free trisul6 docker image on the PCAP like so | + | |
<code bash> | <code bash> | ||
+ | |||
docker run --privileged=true \ | docker run --privileged=true \ | ||
| | ||
- | --net=host | + | |
- | | + | -v / |
- | | + | |
- | | + | --fine-resolution \ |
- | | + | --pcap myhugeCapture.pcap |
</ | </ | ||
- | Now wait for the import to complete. | + | Now wait for the import to complete. |
To check on progress , tail the log and wait for confirmation message! | To check on progress , tail the log and wait for confirmation message! |
docker/pcap_analysis.1519709284.txt.gz · Last modified: 2018/02/27 10:58 by vivek