Re: pcap diff tool

[Nikhil Wagholikar <visitnikhil () gmail com>]

Hi nws3curity,

There is a open source tool called 'pcapdiff'.

Description: Pcapdiff is a tool developed by the EFF to compare two
packet captures and identify potentially forged, dropped, or mangled
packets.

Dependencies: Pcapdiff 0.1 is written in Python and runs from the
command line, and requires the pcapy Python library.

More Info: http://www.eff.org/testyourisp/pcapdiff

Besides this there is another open source tool named 'TPCAT', which is
actually based upon pcapdiff by the EFF. TPCAT will analyze two packet
captures (taken on each side of the firewall as an example) and report
any packets that were seen on the source capture but didn't make it to
the destination.

More Info: http://sourceforge.net/projects/tpcat/

Hope this helps.

Best of Luck!!

---
Nikhil Wagholikar
Practice Lead | Security Assessments & Digital Forensics
Network Intelligence India Pvt. Ltd. [NII Consulting]
Web: http://www.niiconsulting.com/
Comprehensive Information Security Training
http://iisecurity.in/courses/Training Calendar.html

2009/9/24 <nws3curity () gmail com>
> Does anyone know of a good tool that can tells us the difference between 2 pcap files.
>
> We are experiencing connectivity issues between 2 systems.Sometimes it works and sometimes it does not.In both the 
> cases we have captured the traffic and saved it in pcap files.Now we want to compare both of them to see how the 
> traffic differs.
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------