get_behaviour_pcap: Get Behaviour PCAP File

In virustotal: R Client for the 'VirusTotal' API

Get Behaviour PCAP File

Description

Retrieves the PCAP (network capture) file from a sandbox analysis.

Usage

get_behaviour_pcap(sandbox_id = NULL, output_path = NULL, ...)

Arguments

sandbox_id	Sandbox report ID (character string). Required.
output_path	Local path to save the PCAP file. Optional.
...	Ignored. Configure requests with the package options instead (see virustotal).

Value

Raw PCAP content or saves to file if output_path specified

References

https://docs.virustotal.com/reference

See Also

set_key for setting the API key, get_behaviour_report for JSON report

Examples

## Not run: 

# Before calling the function, set the API key using set_key('api_key_here')

pcap <- get_behaviour_pcap(sandbox_id = 'hash_sandboxname')
get_behaviour_pcap(
  sandbox_id = 'hash_sandboxname',
  output_path = '/tmp/capture.pcap'
)

## End(Not run)

virustotal documentation built on Aug. 20, 2026, 5:07 p.m.