Get Session PCAP
get-session-pcapDownload raw PCAP capture for a single GreyNoise sensor session. Returns file path for analysis with Wireshark or tcpdump.
Instructions
Download the raw PCAP capture for a single GreyNoise sensor session. Saves the binary PCAP file to a temporary directory and returns the file path. The file can be opened with Wireshark, tshark, or tcpdump.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| scope | No | Data scope for the query (default: workspace) | |
| session_id | Yes | The unique session identifier |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| filePath | No | ||
| fileSize | No | ||
| available | Yes |