Usage

npx pcap-websocket [yourfile.pcap] [protoHandler] [tcpfilter]

Filter a specific connection with both tcp endpoint, displaywith more readable json if payload are JSON strings

npx pcap-websocket yourfile.pcap ws 192.168.8.247:46286,192.168.8.219:8042 | jq '. | select(.opcode == 1) | .text = (.text | fromjson)' | less

Filter all connection on the websocket server port.

npx pcap-websocket yourfile.pcap ws 192.168.8.219:8042

Known limitation

• Only a websocket handler for now, ws
• Do not support TCP packet reordering. Mostly work on capture on local network
• SSL not supported