goflow2 icon indicating copy to clipboard operation
goflow2 copied to clipboard

Adding a new PCAPFILE receiver

Open j4m3s-s opened this issue 6 months ago • 2 comments

Is your feature request related to a problem? Please describe. Yes and no. We're evaluating different solutions for our packet monitoring solutions and we may need to add changes to this project. Contributing this would help evaluate how easy it is to extend this solution to suit our current and future needs.

Describe the solution you'd like To test out new functionalities when developping, it would be nice to use a PCAP file as source so that we can replay the same traffic and see if it solves the issues. Wdyt ?

Describe alternatives you've considered Mocking the traffic would probably be harder than integrating some new kind of deterministic ingest instead.

Additional context

j4m3s-s avatar Aug 14 '25 14:08 j4m3s-s

Hello, While this is a good idea, unfortunately, I do not have the time to add a new input.

For what you're looking for, I would suggest doing a packet capture of the output of host-sflowd (configured to capture on local interfaces). Then tcpreplay should be able to replay the flow samples for the collector.

lspgn avatar Aug 27 '25 06:08 lspgn

Hey,

Would you be open to reviewing such a PR ? I have something quickly hacked around that seem to work, I could try to clean it up to make it easier to merge upstream. Wdyt ?

Thanks for the pointers ! Didn't know about tcpreplay :).

j4m3s-s avatar Aug 27 '25 07:08 j4m3s-s