hello,

I use pktminerg with the command below on windows platform,but it has error

how can i use the pktminerg with options "-i"?

PS C:\Users\Administrator\bin> getmac /fo csv /v
"连接名","网络适配器","物理地址","传输名称"
"VirtualNet","Hillstone Virtual Network Adapter Tunnel","暂缺","媒体已断开连接"
"本地连接","Xen Net Device Driver","FA-16-3E-A3-F9-11","\Device\Tcpip_{6E118FB8-ED1B-48C4-B597-EC9E2560CC2A}"
PS C:\Users\Administrator\bin>
PS C:\Users\Administrator\bin>
PS C:\Users\Administrator\bin> .\pktminerg.exe -i \Device\NPF_{6E118FB8-ED1B-48C4-B597-EC9E2560CC2A} -r 192.168.1.20
pktminerg.exe : 为 -inputFormat 参数指定了无效的值(\Device\NPF_)。有效值为 Text 和 Xml。
所在位置 行:1 字符: 1

• .\pktminerg.exe -i \Device\NPF_{6E118FB8-ED1B-48C4-B597-EC9E2560CC2A} -r 192.168 ...

•   + CategoryInfo          : InvalidArgument: (:) []，ParameterBindingException
    + FullyQualifiedErrorId : IncorrectValueForFormatParameter
  
  

PS C:\Users\Administrator\bin>

thank you for your help

catch-analysis transport protocal maybe not proper

是否支持基于arm平台的k8s镜像，并采用daemonset 方式进行部署，而且k8s采用的运行时是containerd。

[root@ab ~]# cat /etc/redhat-release
CentOS Linux release 7.1.1503 (Core)

[root@ab ~]# yum install libpcap
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile

• base: ftp.sjtu.edu.cn
• extras: ftp.sjtu.edu.cn
• updates: ftp.sjtu.edu.cn
  Resolving Dependencies
  --> Running transaction check
  ---> Package libpcap.x86_64 14:1.5.3-3.el7_0.1 will be updated
  ---> Package libpcap.x86_64 14:1.5.3-11.el7 will be an update
  --> Finished Dependency Resolution

Dependencies Resolved

============================================================================================================================================================
Package Arch Version Repository Size

Updating:
libpcap x86_64 14:1.5.3-11.el7 base 138 k

Transaction Summary

Upgrade 1 Package

Total download size: 138 k
Is this ok [y/d/N]: y
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
libpcap-1.5.3-11.el7.x86_64.rpm | 138 kB 00:00:00
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Updating : 14:libpcap-1.5.3-11.el7.x86_64 1/2
Cleanup : 14:libpcap-1.5.3-3.el7_0.1.x86_64 2/2
Verifying : 14:libpcap-1.5.3-11.el7.x86_64 1/2
Verifying : 14:libpcap-1.5.3-3.el7_0.1.x86_64 2/2

Updated:
libpcap.x86_64 14:1.5.3-11.el7

Complete!

[root@ab ~]# wget https://github.com/Netis/packet-agent/releases/download/v0.3.0/netis-packet-agent-0.3.0.el6.x86_64.rpm
--2018-07-31 13:03:27-- https://github.com/Netis/packet-agent/releases/download/v0.3.0/netis-packet-agent-0.3.0.el6.x86_64.rpm
Resolving github.com (github.com)... 192.30.255.112, 192.30.255.113
Connecting to github.com (github.com)|192.30.255.112|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-production-release-asset-2e65be.s3.amazonaws.com/138287889/60e78a2c-764b-11e8-95e6-6e042165848b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20180731%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20180731T050329Z&X-Amz-Expires=300&X-Amz-Signature=5c853bbc8dcddcbf58372740192218d26a1e217af9d832fb6ea5a56f326c1513&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment%3B%20filename%3Dnetis-packet-agent-0.3.0.el6.x86_64.rpm&response-content-type=application%2Foctet-stream [following]
--2018-07-31 13:03:29-- https://github-production-release-asset-2e65be.s3.amazonaws.com/138287889/60e78a2c-764b-11e8-95e6-6e042165848b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20180731%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20180731T050329Z&X-Amz-Expires=300&X-Amz-Signature=5c853bbc8dcddcbf58372740192218d26a1e217af9d832fb6ea5a56f326c1513&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment%3B%20filename%3Dnetis-packet-agent-0.3.0.el6.x86_64.rpm&response-content-type=application%2Foctet-stream
Resolving github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)... 52.216.227.176
Connecting to github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)|52.216.227.176|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 104728 (102K) [application/octet-stream]
Saving to: etis-packet-agent-0.3.0.el6.x86_64.rpm

100%[==================================================================================================================>] 104,728 94.6KB/s in 1.1s

2018-07-31 13:03:31 (94.6 KB/s) - etis-packet-agent-0.3.0.el6.x86_64.rpmsaved [104728/104728]

[root@ab ~]# ll
total 108
-rw-------. 1 root root 1153 Jul 31 10:54 anaconda-ks.cfg
-rw-r--r--. 1 root root 104728 Jun 22 18:37 netis-packet-agent-0.3.0.el6.x86_64.rpm

[root@ab ~]# rpm -ivh netis-packet-agent-0.3.0.el6.x86_64.rpm
error: Failed dependencies:
libboost_filesystem.so.1.59.0()(64bit) is needed by netis-packet-agent-0.3.0-1.x86_64
libboost_program_options.so.1.59.0()(64bit) is needed by netis-packet-agent-0.3.0-1.x86_64
libboost_system.so.1.59.0()(64bit) is needed by netis-packet-agent-0.3.0-1.x86_64

We're so excited that you've decided to create a new project! Now that you're here, let's make sure you know how to get the most out of GitHub Projects.

• Create a new project
• Give your project a name
• Press the ? key to see available keyboard shortcuts
• Add a new column
• Drag and drop this card to the new column
• Search for and add issues or PRs to your project
• Manage automation on columns
• Archive a card or archive all cards in a column

Generic Routing Encapsulation (GRE) is a tunneling protocol developed by Cisco Systems that can encapsulate a wide variety of network layer protocols inside virtual point-to-point links or point-to-multipoint links over an Internet Protocol network.

Packet Agent support capture pcap forwarding via GRE Tunnel to remote. Furthermore, you can set GRE key in command line params.

GRE key include ippair direction information at high 4 bits.

request to build Kylin OS release
what about the arm support?

您好，我下载了源码，用vs2017尝试编译，boost版本是1.73，cmake配置没有成功是因为boost版本不匹配么？

大佬好，我看到docker目录的关于K8S流量监控，我使用了第一种方法，把服务启动起来，但是没有看到什么效果，还需要设置什么内容？

any idea about simplified installation steps, add repository to use yum install/upgrade command?

kubernetes平台下pod会创建或销毁，
创建pod，此pod对应的veth会被创建；
销毁pod，此pod对应的veth会被销毁；
请问这种情况下，veth的采集packet-agent支持吗

By using wildcard, we can use the name of the network infterface in the parameter "--expression", which can be translated to the ip of the interface.

Virtual Extensible LAN (VXLAN) is a network virtualization technology that attempts to address the scalability problems associated with large cloud computing deployments. It uses a VLAN-like encapsulation technique to encapsulate OSI layer 2 Ethernet frames within layer 4 UDP datagrams, using 4789 as the default IANA-assigned destination UDP port number.

Packet Agent support capture pcap forwarding via VXLAN Tunnel to remote. Furthermore, you can set VXLAN VNI in command line params.

VXLAN VNI include ippair direction information at high 4 bits.

ZeroMQ looks like an embeddable networking library but acts like a concurrency framework. With the implementation of the feature, Packet-Agent is able to transfer the captured packets relliably.

VLAN is a set of equipment and users on logic. They are not affected by their locations. Based on function, department and other factors, they are associated and communicated as if they are in the same network. In packtes, VLAN header is out of the IP header. From the version, Packet-Agent can decode VLAN header and transfer the packets with VLAN header.

hi

In releases
I only find https://github.com/Netis/packet-agent/releases/download/v0.6.0/netis-packet-agent-0.6.0_amd64.deb yet

is Debian aarch64 supported?

thanks

INSTALL.md isn't up to date. Those windows installations was missing in INSTALL.md

您好，请教一个技术问题， ScopeGuard这个类没看懂这个类起什么作用？

With this feature, Packet-Agent can download the packets captured to a specified directory. Furthermore, the interval for dump can also be set.

大量 这个包错误，请问要怎么解决

can i use a non-root user to executive packet-agent ?

When I run "pktminerg -i tap7f7776ea-11 -r 10.0.0.222" to capture on interface tap7f7776ea-11, I get:

[2019-10-25 17:07:36] Set pcap filter as "not host 10.0.0.222".
[2019-10-25 17:07:36] Call pcap_lookupnet failed, error is tap7f7776ea-11: no IPv4 address assigned.
[2019-10-25 17:07:36] Call PcapLiveHandler openPcap failed.

But I do need to capture on interface "tap7f7776ea-11", which is a virtual interface on linux-bridge, and send the packets via another interface to host "10.0.0.222", please kindly suggest a solution, thank you.

add "--expression" to filter the incoming packets

大佬，我们现在的node隧道网络是通过ovs-vswitchd软件实现，部署pa后出现pa给ovs-vswitchd发送异常停止信号（signal 15），终止了进程，请问是什么原因？

Cards can be added to your board to track the progress of issues and pull requests. You can also add note cards, like this one!

Hi everyone, I have test packet-agent binary package with ubuntu14.04 https://github.com/Netis/packet-agent/releases/download/v0.3.6/netis-packet-agent-0.3.6_amd64.deb

first run pktminerg on 192.168.1.21

pktminerg -i eth0 -r 192.168.1.25 -z 5555 -k 20

install python-zmq on 192.168.1.25

sudo apt-get install python-zmq

run python zmq server with follow demo code

import zmq
context = zmq.Context()
socket = context.socket(zmq.REP)
socket.bind("tcp://*:5555")
while True:
message = socket.recv_string()
print(message)
socket.send_string("OK, 200")

but 192.168.1.25 can not recv any message, I am sure firewall is close

I hope that packet-agent adds timestamp(with ns), before output pcap.

In many cases, we need to limit the traffic of packets transferred to other servers, which should be a very useful feature