Full Disclosure mailing list archives

pcap flow extraction


From: "Ivan ." <ivanhec () gmail com>
Date: Thu, 6 Dec 2007 18:35:42 +1100

Hi,

Does anyone have any ideas for flow information extraction from a rather
large pcap file, 6 gigs?

I am after the standard stuff, source, destination, service.

Ethereal/wireshark is a no go, as it won't process the file due to size,
tcpflow is OK, but a little untidy.

any suggestions are appreciated, preferably open source and also has anyone
used "tcpdstat" for something like this?


thanks
Ivan
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: