{"id":32210748,"url":"https://github.com/lilithsec/virani","last_synced_at":"2026-02-22T19:05:50.552Z","repository":{"id":142773344,"uuid":"607309060","full_name":"LilithSec/Virani","owner":"LilithSec","description":"PCAP retrieval for any FPC setup writing to PCAP files.","archived":false,"fork":false,"pushed_at":"2024-10-21T15:33:30.000Z","size":86,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-10-22T06:41:07.464Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://metacpan.org/dist/Virani","language":"Perl","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"lgpl-2.1","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/LilithSec.png","metadata":{"files":{"readme":"README.md","changelog":"Changes","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-02-27T18:26:12.000Z","updated_at":"2024-10-21T15:32:03.000Z","dependencies_parsed_at":null,"dependency_job_id":"768d90d0-5691-482e-9eaf-1ee189ae6955","html_url":"https://github.com/LilithSec/Virani","commit_stats":null,"previous_names":[],"tags_count":9,"template":false,"template_full_name":null,"purl":"pkg:github/LilithSec/Virani","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LilithSec%2FVirani","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LilithSec%2FVirani/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LilithSec%2FVirani/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LilithSec%2FVirani/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/LilithSec","download_url":"https://codeload.github.com/LilithSec/Virani/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LilithSec%2FVirani/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29723577,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-22T15:10:41.462Z","status":"ssl_error","status_checked_at":"2026-02-22T15:10:04.636Z","response_time":110,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-10-22T06:39:58.945Z","updated_at":"2026-02-22T19:05:50.546Z","avatar_url":"https://github.com/LilithSec.png","language":"Perl","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Virani\n\n## Installation \u0026 Setup\n\nInstall various Perl requiremnets. This can be taken care of with\ncommand below.\n\n```shell\n    cpanm Virani\n```\n\nConfigure it.\n\nFor example on FreeBSD if you have daemonlogger set up something like\nbelow.\n\n```shell\n    daemonlogger_enable=\"YES\"\n    daemonlogger_flags=\"-f /usr/local/etc/daemonlogger.bpf -d -l /var/log/daemonlogger -t 120\"\n```\n\nThen a basic config would be like below.\n\n```toml\n    default_set='default'\n    allowed_subnets=[\"192.168.14.0/23\", \"127.0.0.1/8\"]\n    [sets.default]\n    path='/var/log/daemonlogger'\n    regex='(?\u003ctimestamp\u003e\\d\\d\\d\\d\\d\\d+)(\\.pcap|(?\u003csubsec\u003e\\.\\d+)\\.pcap)$'\n    strptime='%s'\n```\n\nFor more information on the config file, see the POD for Virani.\n\n## Usage\n\nA example grabbing port 53 traffic below can be done like the\nfollowing.\n\n```shell\n    virani -s 2023-02-27T11:00:18 -e 2023-02-27T11:31:18 port 53\n```\n\nThe time may also be specified like below.\n\n```\nnow       current time\nnow-30    30 seconds ago\nnow-30m   30 minutes ago\nnow-30h   30 hours ago\nnow-30w   30 weeks ago\n```\n\nSo if you wanted to find all port 53 traffic in the last minute, you\ncould do somethiing like below.\n\n```shell\n    virani -s now-1m -e now port 53\n```\n\nThe help info for virani is as below. For more info check out the POD\nfor the module Virani and the script Virani.\n\n```\n--help            Print this.\n-h                Print this.\n\n--version         Print version.\n-v                Print version..\n\n-r \u003cremote\u003e       Remote URL or config file for remote info.\n\n-a \u003capikey\u003e       API key for remote URL if needed.\n\n-f \u003cfilter\u003e       Filter for use with tshark or tcpdump.\n\n-t \u003ctype\u003e         tcpdump or tshark\n                  Default :: tcpdump\n\n-t \u003cset\u003e          Set to use. If undef, uses whatever the default is.\n                  Default :: undef\n\n--config \u003cconfig\u003e Config file to use.\n                  Default :: /usr/local/etc/virani.toml\n\n-s \u003ctimestamp\u003e    Start timestamp. Any format supported by\n                  Time::Piece::Guess is usable.\n\n-e \u003ctimestamp\u003e    End timestamp. Any format supported by\n                  Time::Piece::Guess is usable.\n\n-w \u003coutput\u003e       The file to write the PCAP to.\n                  Default :: out.pcap\n\n--nc              If cached, do not use it.\n\n-k                Do not check the SSL cert for HTTPS for remote.\n```\n\n# LICENSE AND COPYRIGHT\n\nThis software is Copyright (c) 2023 by Zane C. Bowers-Hadley.\n\nThis is free software, licensed under:\n\n  The GNU Lesser General Public License, Version 2.1, February 1999\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flilithsec%2Fvirani","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flilithsec%2Fvirani","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flilithsec%2Fvirani/lists"}