PCAP
Reads packet-capture files the Skipprd host can see. There are no extra keys — point the pipeline at this source when you already have capture files in the working environment the connector expects.
Before you begin
- Capture files available to the Skipprd process.
- This is a specialist source. Prefer Kafka, S3, or a database when you have application data.
Configure
python
from skippr import Config, DataSourcePcap, Pipeline
cfg = Config.discover()
src = cfg.data_source("trace", DataSourcePcap())
cfg.pipeline("trace", Pipeline(data_source=src))
cfg.save()bash
skipprd connect data-source pcap \
--pipeline trace \
--name traceyaml
data_sources:
trace:
Pcap: {}Options
This connector has no configuration keys.
What gets synced
Decoded packets become records. Re-running over the same files can duplicate rows in append-only destinations.
Troubleshooting
| Symptom | Fix |
|---|---|
| No rows | Confirm capture files are present for the process user |
| Permission denied | Grant read on the capture path |
