- Use
pcap
as default file format
- Use alpine:3.17 as a base image
- Use tshark in version
4.0.1-r0
- Use dumpcap directly instead of tshark
- Change the defaults for
- FILTER to "icmp" (prevents unintentional capture of all traffic)
- DURATION to 600 seconds (prevents unintentional infinity captures)
- Do not set INTERVAL and DURATION at the same time, prefer INTERVAL if both set
- Added interval-option to tshark ring-buffer.
- Added snaplength feature
- Specified base image as alpine:3.9
- Reworked (experimental) formatting option
- Added (experimental) formatting option
- Fix: Apply filter to all interfaces