4.3. hakapcap¶

hakapcap is a tool to quickly apply a Haka policy file to a pcap file and see the resulting decisions.

$ hakapcap [options] <hakafile> <pcapfile>

4.3.1. Options¶

-h, --help¶: Display usage and options information.

--version¶: Display version information.

-d, --debug¶: Display debug output.

--no-pass-through¶: Disable pass-through mode (probe mode).

-o <output>¶: Save unfiltered packets.

--debug-lua¶: Start hakapcap and automatically attach the Haka debugger.

hakafile: A Haka policy file.

pcapfile: A pcap file containing the packets to filter.