Skip to content

Commit

Permalink
readme update
Browse files Browse the repository at this point in the history
  • Loading branch information
sanderzegers committed Nov 24, 2024
1 parent b036319 commit c2e25a3
Show file tree
Hide file tree
Showing 3 changed files with 16 additions and 7 deletions.
22 changes: 16 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,22 +4,32 @@

## Description

This Wireshark Extcap extension enables the capture of live network packets directly from Fortigate devices, supporting multiple Virtual Domains (VDOMs). It is designed to integrate with Wireshark, providing a straightforward solution for network administrators and security professionals to monitor and troubleshoot their networks.
This Wireshark Extcap extension enables live network packet capture directly from Fortigate devices into Wireshark.

asdfsadfadsf
![Wireshark Screenshot](images/wireshark-extcap.png)

## Features

- Capture packets live to Wireshark
- Capture packets live into Wireshark
- Fortigate VDOM Support
- Simple installation

## Installation

1. Launch Wireshark.
2. Go to "Help" -> "About Wireshark" -> "Folders" -> "Personal Extcap Path".
3. Copy the `fortidump.exe` file from this repository into the "Personal Extcap Path" folder.
4. Restart Wireshark to enable the custom extcap extension.
1. Download the Latest Version
- Visit the [Releases](https://github.com/sanderzegers/fortigate-extcap/releases/) page and download the version that matches your platform.

2. Locate the Personal Extcap Path
- Open Wireshark.
- Navigate to Help → About Wireshark → Folders → Personal Extcap Path.
- Click the Location to open the Extcap folder.

3. Copy the binary to excapt folder
- From the downloaded release, copy the fortigate-extcap.exe (or the appropriate file for your platform) into the "Personal Extcap Path" directory.

4. Restart Wireshark
- Restart Wireshark to load the custom extcap extension.

## Known limitations

Expand Down
1 change: 0 additions & 1 deletion fortidump.go
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,6 @@ package main
//TODO: SSH Certificate Authentication
//TODO: SSH Host Key verification
//TODO: pre-login-banner / post-login-banner support
//TOFIX: No error messages in Wireshark when logfile enabled

import (
"bufio"
Expand Down
Binary file modified images/wireshark-extcap.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit c2e25a3

Please sign in to comment.