Skip to main content

PcapConvert

This Script is part of the PCAP Analysis Pack.#

Supported versions

Available on Cortex XSOAR (versions 6.2.0 and later) and Cortex XSIAM.

Convert packet data to the standard pcap. Currently it only supports CDL(NGFW) pcap from which to convert.

Script Data#


NameDescription
Script Typepython3
Tagspcap, Utility, transformer

Inputs#


Argument NameDescription
valueThe value to be converted from.
pathThe context path to the pcap (e.g., PcapData.pcap). If you add a comma + a node name after the path, the output will be set to the node (e.g., PcapData.pcap,out).
pcap_typeThe data type of the pcap data.
error_actionThe action on error to parsing pcap. Possible values are abort (default), ignore, and keep.

Outputs#


There are no outputs for this script.