Snort mailing list archives

Re: Replay 0.1


From: Andreas Östling <andreaso () it su se>
Date: Thu, 14 Nov 2002 21:27:51 +0100 (CET)


On Thu, Nov 14, 2002 at 02:29:35PM +0100, Andreas Östling wrote:

If anyone knows about a (free) tool that already does this kind of playback
of pcap files, please let me know so I don't have to continue reinventing
the wheel.

Several people are mentioning 'tcpreplay' off-list.
Unfortunately, tcpreplay is something totally different.
AFAIK tcpreplay is about generating network traffic according to
logged traffic dumps. That's great and all, but it's not what I wanted in
this case. My patch simply prints the network session to the screen in a
useful way. Please try it out to get the idea.

It appears that "replay" or "playback" aren't good choice of words for
this, but I don't know what else to call it.

/Andreas



-------------------------------------------------------
This sf.net email is sponsored by: To learn the basics of securing
your web site with SSL, click here to get a FREE TRIAL of a Thawte
Server Certificate: http://www.gothawte.com/rd524.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: