velcro
Archive Velcro JSON Lines data to SQLite. Designed to be used with xivsniff. Velcro prints
all data it receives to standard output, so additional programs can be chained in front of it.
Usage
Data will be saved to velcro.db
in your working directory.
From a file
cat <file> | velcro
With xivsniff
xivsniff | velcro
Viewing your data
DBeaver is a useful tool for viewing archived packet data.
It has a built-in hex viewer for SQLite BLOB
columns, which can be used to save a blob to a file for analysis
in a tool such as ImHex or 010.
With DBeaver (or any other SQLite viewer), packets can be queried using SQL statements, and grouped by data such as their opcodes
or source IP addresses. DBeaver also supports directly opening a hexdump in an external editor, making the workflow very easy to work with.