[ILUG] Compare TCP captures from both ends of a connection
bigbro at skynet.ie
Fri Jul 3 15:57:05 IST 2009
Kenn Humborg wrote:
> There's a new option Statistics->Compare that seems to do
> what I want. I'll still have to use editcap to time-adjust
> one file , but it's better than nothing.
It should be able to do the time adjusting itself, by finding a matching pair
of packets (match IP, port, size and SEQ, assuming not too many retransmits.)
If not, you can do it yourself, of course.
More information about the ILUG