The S3 plugins allows to stream packets to the given S3 buckets.
Before running PacketStreamer, AWS credentials need to be configured by one of the following ways:
~/.aws/configfile - it can be created by
The first way might be more convenient when running as root (required when running a sensor).
S3 plugin configuration has the following syntax:
plugins: # optional
totalFileSize: _file_size_ # optional; default: 10 MB
uploadChunkSize: _file_size_ # optional; default: 5 MB
uploadTimeout: _timeout_ # optional; default: 1m
cannedACL: _acl_ # optional; default: Bucket owner enforced
If you want to stream locally captured packets from sensor to S3, you can use the following example configuration from contrib/config/sensor-s3.yaml:
And run PacketStreamer with it:
sudo packetstreamer sensor --config ./contrib/config/sensor-s3.yaml
If you want to stream packets from receiver to S3, you can use the following example configuration from [contrib/config/receiver-s3.yaml]
packetstreamer receiver --config ./contrib/config/receiver-s3.yaml