Download a PCAP analysis archive. The result is a zip archive containing the PCAP itself, CSVs representing various analysis results, and all carved files.'

pt_download(pcap_id, dl_dir = getwd(), archive_name = NULL,
  api_key = packettotal_api_key())

Arguments

pcap_id

An md5 hash corresponding to the PCAP file submission on PacketTotal.com. This hash can be derived by hashing the PCAP file in question.

dl_dir

directory where to store the download

archive_name

name of the ZIP file. If left NULL then a ZIP file will be created with the name YYYY-mm-dd-pcap_id.zip.

api_key

your packettotal_api_key().

Value

if successful and the analysis package is ready then the full path to the ZIP file is returned (invisibly). If the analysis package is not ready the return value is "_PROCESSING_".

References

https://packettotal.com/api-docs/#/pcaps/get_pcaps__pcap_id__download

Examples

# NOT RUN {
str(try(pt_download("536cf06ca83704844d789f56caf22ee6"), silent=TRUE), 2)
# }