Search Results for "pcap"

tcpreplay is a suite of tools to edit and replay captured network traffic.

...So far, I've been able to run things that I can run with the Cygwin version, and some of the broken features are on par. I've also been able to merge in the 'unstable' PowerPC core which can run things the 'stable' cannot. Transport wise, I've gotten it to talk with pcap and UDP. I have the groundwork to make it dynamic so that pcap isn't required to run it, so you can run dynamips without installing anything. I hope to add some different underlying networking connections.

*** This project moved to Github *** https://github.com/phaag/nfdump However, you may want to download older versions from here. nfdump is a set of tools to collect and process netflow data. It's fast and has a powerful filter pcap like syntax. It supports netflow versions v1, v5, v7, v9 and IPFIX as well as a limited set of sflow. It includes support for CISCO ASA (NSEL) and CISCO NAT (NEL) devices, which export event logging records as v9 flows. nfdump is fully IPv6 compatible.

New: Network View... still bugged but I'm working on it Add multiple reference hosts (for futur dump correlation) This tool helps you to easily clean a "pcap" file by manipulating graphically hosts, connections, sessions. Automatically suppress non TCP and non UDP traffic. Can use tshark to decode frames. Can save cleaned capture to pcap file format. See https://sourceforge.net/p/netpackclean/wiki/?source=navbar for Changelog

Splits large PCAP files into multiple files with one TCP or UDP session per file. SplitCap is a command line tool developed in .NET. The packet parsing library in SplitCap comes from NetworkMiner. SplitCap can also filter large PCAPs on port or IP.

Security Analyst Network Connection Profiler [sancp] is a network security tool designed to create connection logs and record network traffic for the purpose of auditing, historical analysis, and network activity discovery.

IP accounting tools package based on Berkeley Packet Filer mechanism. Continue from BPFT by V.Vorobyev, TRAFD by V.Belekhov & S.Svirid. Use the PCAP library to implement connection to bpf kernel pseudo-device.