Re: [Openpacket-devel] Feature idea
Brought to you by:
crazy_j,
taosecurity
|
From: Richard B. <tao...@gm...> - 2008-05-20 13:37:12
|
On Mon, May 19, 2008 at 11:36 PM, Aaron Turner <syn...@gm...> wrote: > So I was thinking... what about allowing people to associate arbitrary > files with pcaps? Well maybe not just any arbitrary file... not sure > what the value of that is, but I'd definitely would be interested in > providing tcpprep cache files for each of the captures. > > What's a tcpprep cache file you ask? > > It's a small file (a fraction of the actual pcap file size) which > tells tcpreplay which packets are sent by a server and which are sent > by a client. Using this information, tcpreplay is able to split > traffic in a pcap file between two interfaces in order to test an > inline device like a firewall, router or IPS. > > If this is something Richard approves and Sharri implements I'd be > willing to provide tcpprep cache files for all of the existing pcaps. > Hi Aaron, I think this is a good idea. Users will probably be fairly creative. We can have the moderators check the file to ensure it's not something disagreeable. Would you mind filing a feature request at http://sourceforge.net/tracker/?group_id=148106&atid=770565 ? Thank you, Richard |