Snort mailing list archives
Re: Replay 0.1
From: Andreas Östling <andreaso () it su se>
Date: Thu, 14 Nov 2002 21:27:51 +0100 (CET)
On Thu, Nov 14, 2002 at 02:29:35PM +0100, Andreas Östling wrote:
If anyone knows about a (free) tool that already does this kind of playback of pcap files, please let me know so I don't have to continue reinventing the wheel.
Several people are mentioning 'tcpreplay' off-list. Unfortunately, tcpreplay is something totally different. AFAIK tcpreplay is about generating network traffic according to logged traffic dumps. That's great and all, but it's not what I wanted in this case. My patch simply prints the network session to the screen in a useful way. Please try it out to get the idea. It appears that "replay" or "playback" aren't good choice of words for this, but I don't know what else to call it. /Andreas ------------------------------------------------------- This sf.net email is sponsored by: To learn the basics of securing your web site with SSL, click here to get a FREE TRIAL of a Thawte Server Certificate: http://www.gothawte.com/rd524.html _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Replay 0.1 Andreas Östling (Nov 14)
- <Possible follow-ups>
- Re: Replay 0.1 Andreas Östling (Nov 14)