Allow users to associate other files with pcaps
Brought to you by:
crazy_j,
taosecurity
So I was thinking... what about allowing people to associate arbitrary files with pcaps? Well maybe not just any arbitrary file... not sure what the value of that is, but I'd definitely would be interested in
providing tcpprep cache files for each of the captures.
What's a tcpprep cache file you ask?
It's a small file (a fraction of the actual pcap file size) which tells tcpreplay which packets are sent by a server and which are sent by a client. Using this information, tcpreplay is able to split traffic in a pcap file between two interfaces in order to test an inline device like a firewall, router or IPS.
Anyways, there are probably other file types which might be interesting too.