We're looking for most effective way to pre-process pcap traces. Feel free to contact me for discussion and collaboration.
The modules can be used for pcap-csv conversion.
- pcap2pcaps - using editcap to split a large pcap file into smaller pcap files.
- pcap2csv_singlethread - using tshark to extract the important field from pcap files.
- pcap2csv5_multithreads_3 - using tshark and multithreading (3 threads) to extract the important field from pcap files.
- pcap2csv5_multithreads_5 - using tshark and multithreading (5 threads) to extract the important field from pcap files.
- csv2dataframe - using Pandas to read in csv files and concatenate all the dataframe into one.