On Mon, May 19, 2008 at 11:36 PM, Aaron Turner <syn...@gm...> wrote:
> So I was thinking... what about allowing people to associate arbitrary
> files with pcaps? Well maybe not just any arbitrary file... not sure
> what the value of that is, but I'd definitely would be interested in
> providing tcpprep cache files for each of the captures.
>
> What's a tcpprep cache file you ask?
>
> It's a small file (a fraction of the actual pcap file size) which
> tells tcpreplay which packets are sent by a server and which are sent
> by a client. Using this information, tcpreplay is able to split
> traffic in a pcap file between two interfaces in order to test an
> inline device like a firewall, router or IPS.
>
> If this is something Richard approves and Sharri implements I'd be
> willing to provide tcpprep cache files for all of the existing pcaps.
>
Hi Aaron,
I think this is a good idea. Users will probably be fairly creative.
We can have the moderators check the file to ensure it's not something
disagreeable.
Would you mind filing a feature request at
http://sourceforge.net/tracker/?group_id=148106&atid=770565
?
Thank you,
Richard
|
