securityonion
securityonion copied to clipboard
FEATURE: Add ability to show, export, and download one side of conversation in PCAP
An analyst could use the ability to filter the pcap view to one side of the conversation, i.e. client or server (leaving both as default), to optimize their pcap analysis. Additionally, the analyst should have the ability to download or export to CyberChef only the filtered display. Ideally, the export and download choices would give the user a choice to get the entire pcap or only the displayed packets.