Glossary: Security Monitoring and Automation

pcap

Also written: pcap file, .pcap

The standard file format for saved packet captures, such as /tmp/kc/web.pcap. tcpdump writes it with `-w`, and tshark reads it with `-r`.