up vote 1 down vote favorite
1
share [g+] share [fb]

I've recently become familiar with the Layer 7 Filter project, and it's ability to classify protocols is quite interesting.

All of the information about its use, however, concerns using the filters to do queueing in real-time in order to implement bandwidth management/QOS. What I'm interested in is using the filters to classify traffic that I've already captured in pcap format.

Comments, hints, experiences, references, or wtfs, welcome.

link|improve this question
75% accept rate
feedback

1 Answer

up vote 2 down vote accepted

tcpreplay wireplay preplay

There are a bunch of packages that do tcp replay of pcap files.

link|improve this answer
Sorry for the late accept, this is a great idea, though I'll have to do this from a machine off-network to prevent network from having to deal with the now-irrelevant traffic. – Cory J Jul 27 '10 at 19:31
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.