1

How can I reconstruct session from pcap file?

view story
linux-howto

http://serverfault.com – I am trying to extract session level (flow level) information from my pcap trace file. I want to generate the following data for each line of session (flow): Flow_num, IP_Src, IP_Dst, Flow_start_time, Flow_Duration, Flow_type (video/image/text/...), Protocol, Flow_size (HowTos)