I would like to classify traffic form pcap files.
I am using the userspace version of l7-filter.
My OS is Ubuntu 10.10 maverick.
How could I get l7-filter to classify the captured data?
I have tried tcpreplay, but it seems like it does not work.
I have not used l7-filter before.
my iptables looks like this:
iptables -A INPUT -j QUEUE
iptables -A OUTPUT -j QUEUE
and l7-filter is set like that:
l7-filter -f l7_config.conf -v
I can see things like matched http and matched skypeout, etc.
But I can't figure a way to make l7 to classify the capture data.