read_zeek_logs: Read zeek logs from a processed PCAP into a list

Description Usage Arguments Note Examples

View source: R/read-zeek-logs.R

Description

Read zeek logs from a processed PCAP into a list

Usage

1
read_zeek_logs(log_dir)

Arguments

log_dir

directory of zeek logs

Note

Logs must be in Parquet or JSON format.

Examples

1
2
3
4
5
6
7
8
9
loc <- tryCatch(
  pcap_to_zeek(system.file("pcap/ssh.pcap", package = "zeekr")),
  error = function(e) message("No Zeek")
)

if (!is.null(loc)) {
  read_zeek_logs(loc)
  unlink(loc) # don't do this IRL until you're done working with or saving.
}

hrbrmstr/zeekr documentation built on Dec. 20, 2021, 4:49 p.m.