Honeypots: Re: pcap log analysis

[Kyle Maxwell <krmaxwell () gmail com>]

On Mon, 19 Jul 2004 15:33:56 +0200 (MEST), Joe Hickory
<j.hickory () gmx net> wrote:
> anybody knows or has some shell scripts or the like with which i can analyse
> network
> traffic saved in pcap format in a file. didn't wanted to reinvent the wheel,
>
> as i think there are others who faced the same problem before, but couldn't
> find
> anything.
>
> some nice created diagrams out of the data would be great, but not
> neccessary.
>
> any suggestion would be great
Googling for "pcap analysis", I found
http://idabench.ists.dartmouth.edu/links.html which lists a lot of
useful tools, as does http://www.stearns.org/doc/pcap-apps.html. I'm
thinking about putting together a suite of tools for analysis and
visualization but (like you) still looking around to make sure I don't
try to reinvent the wheel.