Honeypots: Re: pcap log analysis

[Graeme Connell <gconnell () middlebury edu>]

It's not a shell script, but ethereal (http://www.ethereal.com/) can 
take in pcap data (like that found by tcpdump) and give you very 
detailed data about the packets you've captured.  Hope this helps.
      --Graeme Connell

Joe Hickory wrote:

> hi list, 
>
> anybody knows or has some shell scripts or the like with which i can analyse
> network 
> traffic saved in pcap format in a file. didn't wanted to reinvent the wheel,
> as i think there are others who faced the same problem before, but couldn't
> find 
> anything. 
>
> some nice created diagrams out of the data would be great, but not
> neccessary. 
>
> any suggestion would be great 
>
> joe 
>
>