[Openpacket-devel] Feature idea

[Aaron T. <syn...@gm...>]

So I was thinking... what about allowing people to associate arbitrary
files with pcaps?  Well maybe not just any arbitrary file... not sure
what the value of that is, but I'd definitely would be interested in
providing tcpprep cache files for each of the captures.

What's a tcpprep cache file you ask?

It's a small file (a fraction of the actual pcap file size) which
tells tcpreplay which packets are sent by a server and which are sent
by a client.  Using this information, tcpreplay is able to split
traffic in a pcap file between two interfaces in order to test an
inline device like a firewall, router or IPS.

If this is something Richard approves and Sharri implements I'd be
willing to provide tcpprep cache files for all of the existing pcaps.

-- 
Aaron Turner
http://synfin.net/
http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin