google / stenographer

Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Not able to set stenotype packet directory

rskjetlein opened this issue · comments

When setting dir flag in Stenographer config, it still keeps the default /tmp/stenographerN which always ends up being the one used.

Eg.
"Flags": [ "-v", "--dir=/data/stenographer/tmp", "--seccomp=none" ]

results in:
/usr/sbin/stenotype -v --dir=/data/stenographer/tmp --seccomp=none --threads=16 --dir=/tmp/stenographer610447772 --iface=eno1

This will result in stenotype writing to /tmp/stenographer610447772

This is just apparent. The /tmp directory should be a symlink to the /data folder in your thread configuration.