Netcap now support exporting prometheus metrics about its go runtime, the collection process and the audit records itself. This feature can be used with the net.export tool.
Metrics are served by default on 127.0.0.1:7777/metrics. Configure a prometheus instance to scrape it:
# reference: https://prometheus.io/docs/prometheus/latest/configuration/configuration/global:scrape_interval: 15sscrape_timeout: 15s#evaluation_interval: 15sscrape_configs:# process_ metrics- job_name: netcapmetrics_path: /metricsscheme: httpstatic_configs:- targets:- 127.0.0.1:7777
Export a PCAP dumpfile and serve metrics .
$ net.export -r 2017-09-19-traffic-analysis-exercise.pcap
Capture and export traffic live from the named interface:
$ net.export -iface en0
Export a specific audit record file:
$ net.export -r HTTP.ncap.gz
Export all audit record files in the current directory:
$ net.export .