A golang scanner & JSON parser for PCAP SST index files generated by stenographer with NodeJS binding
Compile the command line version using go 1.10+
make
./SSTableKeys /data/stenographer/1/thread0/index $(date -d '1 minute ago' +%s) $(date +%s)
Compile the native binding for nodejs (or download a prebuilt version)
npm install stenoscope
const stenoscope = require('stenoscope');
var args = process.argv.slice(2);
// Define Folder Path & Time Range
var datapath = args[0] || '/var/lib/stenographer/thread0/index';
var fromtime = parseInt(args[1]) || parseInt(new Date().getTime()/1000) - 60;
var totime = parseInt(args[2]) || parseInt(new Date().getTime()/1000);
// Query SStable range to JSON (sstj)
console.log(
sstable.sstj(datapath, fromtime, totime )
);