Hi all,
I tried building my large-pcap-analyzer utility as a classic-confined snap and I was redirected to this forum.
large-pcap-analyzer is a command-line utility program that performs some simple operations on .PCAP files very quickly. This allows you to manipulate also very large PCAP files that cannot be easily handled with other software like Wireshark (or tshark). Supports filtering encapsulated GTPu frames. Supports simple per-TCP-stream filtering. Easily extendible.
This utility is a CLI utility and can be called by the user with a file in input from anywhere in the filesystem so my guess is that I need classic confinement.
Let me know how to proceed
Thanks