Simson L. Garfinkel
Simson L. Garfinkel
Pretty neat. Why don't you run it with debugging turned on? tcpflow ignores MAC addresses. This should just look like retransmitted packets. Are you sure that the packets aren't being...
Glad you are getting the hang of it. Let me know when you figure out the 1.2G and submit a pull request, then we will issue a new release. >...
It's really not hard to add support for another packet format. You just need to know the offset where the data begins. Look at the file datalink.cpp
Thanks On Nov 17, 2013, at 10:11 PM, Ryan Schmidt [email protected] wrote: > In the MacPorts port for tcpflow, I've added this patch, and I suggest it be committed to...
I agree that it would be nice to show both sides of the connection in a single file. This is a feature request.
I can't help you. the code doesn't exist. This is a feature request. On Aug 21, 2012, at 9:10 AM, sathyathirumalai [email protected] wrote: > Thank you so much for your...
Hm. Looks like a bug. The counter gets added if there is going to be a filename collision. I suggest looking at the code. It should be an easy fix....
I believe that connections found in files read with `-R` will only be used to _terminate_ TCP sessions, but a SYN or SYN-ACK seen in the stream will not _start_...
Please feel free to improve the documentation and give a pull request!
Using `-R` by itself will always result in 0 processed, because the R files only close tcp connections created in the r files.