Reputation: 21
Here is a bash script I have 5 PCAP files I want to run these commands against them and then name the new files flow1 flow2 flow3 flow4 flow5 after each PCAP file it goes through I cannot get it to name the files right
the new file comes up as 1 long string flow1 flow2 flow3 flow4 flow5 for just 1 of the files
flow=(flow1 flow2 flow3 flow4 flow5)
dns=(dns1 dns2 dns3 dns4 dns5 dns6)
ntp=(ntp1 ntp2 ntp3 ntp4 ntp5 ntp6)
#creates a new directory based on the PCAP folder name
for file in *.pcap
do
argus -r *.pcap -w packet.argus &&
#Run argus to get the flow volumn (totalbytes) and the flow duration (seconds)
#ra -r packet.argus -s bytes dur > flow_vol_dur.csv
ra -r packet.argus -s bytes dur -u > "${flow[*]}.csv"
ra -r packet.argus -n -s bytes dur rate runtime pkts load loss > features.csv &&
#Run argus to get the source and destination ports, merge both columns together and count how many occurrences
#racluster -r packet.argus -n -s sport dport > ports.csv &&
ra -r packet.argus -n -s stime ltime sport dport - dst port 53 > "${dns[*]}.csv"
ra -r packet.argus -n -s stime ltime sport dport - dst port 123 > "${ntp[*]}.csv" &&
rm packet.argus
done
Upvotes: 0
Views: 44
Reputation: 2654
Without knowing exactly what the argus
and ra
commands do, I suspect this is closer to what you need:
#!/bin/bash
count=0
for file in *.pcap; do
((count++))
argus -r ${file} -w packet.argus
ra -r packet.argus -s bytes dur -u > flow${count}.csv
ra -r packet.argus -n -s bytes dur rate runtime pkts load loss > features.csv
ra -r packet.argus -n -s stime ltime sport dport - dst port 53 > dns${count}.csv
ra -r packet.argus -n -s stime ltime sport dport - dst port 123 > ntp${count}.csv
rm packet.argus
done
Upvotes: 1