[Openpacket-devel] Feature idea
Brought to you by:
crazy_j,
taosecurity
|
From: Aaron T. <syn...@gm...> - 2008-05-20 03:36:18
|
So I was thinking... what about allowing people to associate arbitrary files with pcaps? Well maybe not just any arbitrary file... not sure what the value of that is, but I'd definitely would be interested in providing tcpprep cache files for each of the captures. What's a tcpprep cache file you ask? It's a small file (a fraction of the actual pcap file size) which tells tcpreplay which packets are sent by a server and which are sent by a client. Using this information, tcpreplay is able to split traffic in a pcap file between two interfaces in order to test an inline device like a firewall, router or IPS. If this is something Richard approves and Sharri implements I'd be willing to provide tcpprep cache files for all of the existing pcaps. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin |