From: Sam Jansen (sam@wand.net.nz)
Date: 01/17/05
Message-ID: <41EC7250.7040200@wand.net.nz> Date: Tue, 18 Jan 2005 15:20:00 +1300 From: Sam Jansen <sam@wand.net.nz> Subject: tcptrace tcpnorm available
I've been using tcptrace and xplot for some time to compare packet
traces. To be able to view two or more traces on the same scale in
xplot, I created a program to "normalise" a packet dump. This program
changes the tcp connections in a pcap file to all start from sequence
number 0 and modifies the time stamp of each packet to also start from 0.
Once the output packet trace(s) are run through tcptrace, they can be
compared directly using xplot with it's -x and -y command line options.
I'm unsure whether this program will be of much use to anyone, but on
the off chance it is, you can find the latest version on my software page:
http://www.wand.net.nz/~stj2/nsc/software.html
I've tested it on recent versions of FreeBSD and Linux. It requires only
g++ to build and is completely free. Feel free to email me with any bug
reports or feedback.
Cheers,
-- Sam Jansen sam@wand.net.nz Wand Network Research Group http://www.wand.net.nz/~stj2 ---------------------------------------------------------------------------- To unsubscribe, send a message with body containing "unsubscribe tcptrace" to majordomo@tcptrace.org.
This archive was generated by hypermail 2.1.7 : 01/18/05 EST