Re: lotsa pcap reporting

[Harry Hoffman <hhoffman () ip-solutions net>]

Hmm, maybe start with defining what you want to report about?

Top talkers, top protocols/ports, open services, DNS info, reconstructed files, etc...

Lots of different tools but it depends on what you want to do.

Cheers,
Harry



On Apr 5, 2015 9:16 AM, Hank Disuko <gourmetcisco () hotmail com> wrote:
> hi nanog folks, 
> i have 7GB of darn pcap data separated into individual 50MB files.  Collected via Wireshark. 
> i need a tool that can slurp in all this data and regurgitate pretty, colourful and management-friendly reports.  
> Windows or Linux. 
> any suggestions? 
> thanks, 
> Hank