git Service des IN-Ulm e.V. Erkunden Hilfe
Anmelden
cbiedl
/
tcpreplay
1
0
Fork 0
Dateien
Struktur: 498547f086
Branches Tags
tcpreplay
/
man
/
tcpprep.html

tcpprep.html 13 KB
Verlauf Originalformat

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470 
  1. <!-- Creator     : groff version 1.18.1 -->
    2. 

  2. <!-- CreationDate: Wed Dec 22 15:16:41 2004 -->
    3. 

  3. <html>
    4. 

  4. <head>
    5. 

  5. <meta name="generator" content="groff -Thtml, see www.gnu.org">
    6. 

  6. <meta name="Content-Style" content="text/css">
    7. 

  7. <title>TCPPREP</title>
    8. 

  8. </head>
    9. 

  9. <body>
    10. 

  10. 

  11. <h1 align=center>TCPPREP</h1>
    12. 

  12. <a href="#NAME">NAME</a><br>
    13. 

  13. <a href="#SYNOPSIS">SYNOPSIS</a><br>
    14. 

  14. <a href="#DESCRIPTION">DESCRIPTION</a><br>
    15. 

  15. <a href="#OPTIONS">OPTIONS</a><br>
    16. 

  16. <a href="#SEE ALSO">SEE ALSO</a><br>
    17. 

  17. <a href="#AUTHOR">AUTHOR</a><br>
    18. 

  18. <a href="#BUGS">BUGS</a><br>
    19. 

  19. 

  20. <hr>
    21. 

  21. <a name="NAME"></a>
    22. 

  22. <h2>NAME</h2>
    23. 

  23. <!-- INDENTATION -->
    24. 

  24. <table width="100%" border=0 rules="none" frame="void"
    25. 

  25.        cols="2" cellspacing="0" cellpadding="0">
    26. 

  26. <tr valign="top" align="left">
    27. 

  27. <td width="10%"></td>
    28. 

  28. <td width="89%">
    29. 

  29. <p>tcpprep &minus; create a tcpreplay cache file from a
    30. 

  30. saved capture file</p>
    31. 

  31. </td>
    32. 

  32. </table>
    33. 

  33. <a name="SYNOPSIS"></a>
    34. 

  34. <h2>SYNOPSIS</h2>
    35. 

  35. <!-- INDENTATION -->
    36. 

  36. <table width="100%" border=0 rules="none" frame="void"
    37. 

  37.        cols="2" cellspacing="0" cellpadding="0">
    38. 

  38. <tr valign="top" align="left">
    39. 

  39. <td width="10%"></td>
    40. 

  40. <td width="89%">
    41. 

  41. <p><b>tcpprep</b> [ <b>&minus;a &minus;n</b> [ <i>bridge</i>
    42. 

  42. | <i>router</i> | <i>client</i> | <i>server</i> ] |
    43. 

  43. <b>&minus;c</b> <i>CIDR,...</i> | <b>&minus;r</b>
    44. 

  44. <i>regex</i> | <b>&minus;p</b> ] [ <b>&minus;h</b> |
    45. 

  45. <b>&minus;V</b> ] [ <b>&minus;i</b> <i>pcapfile</i> ] [
    46. 

  46. <b>&minus;v</b> ] [ <b>&minus;m</b> <i>minmask</i> ] [
    47. 

  47. <b>&minus;M</b> <i>maxmask</i> ] [ <b>&minus;N</b>
    48. 

  48. <i>client</i> | <i>server</i> ] [ <b>&minus;R</b>
    49. 

  49. <i>ratio</i> ] [ <b>&minus;x</b> <i>include</i> |
    50. 

  50. <b>&minus;X</b> <i>exclude</i> ] [ <b>&minus;C</b>
    51. 

  51. <i>comment</i> ] <b>&minus;o</b> | <b>&minus;P</b>
    52. 

  52. <i>cachefile</i></p>
    53. 

  53. </td>
    54. 

  54. </table>
    55. 

  55. <a name="DESCRIPTION"></a>
    56. 

  56. <h2>DESCRIPTION</h2>
    57. 

  57. <!-- INDENTATION -->
    58. 

  58. <table width="100%" border=0 rules="none" frame="void"
    59. 

  59.        cols="2" cellspacing="0" cellpadding="0">
    60. 

  60. <tr valign="top" align="left">
    61. 

  61. <td width="10%"></td>
    62. 

  62. <td width="89%">
    63. 

  63. <p><i>Tcpprep</i> is a program for creating a cache file for
    64. 

  64. later use with <i>tcpreplay(8)</i>. By using tcpprep to
    65. 

  65. pre-process a pcap, tcpreplay in dual-nic mode can match the
    66. 

  66. performance of the traditional tcpreplay single-nic
    67. 

  67. mode.</p>
    68. 

  68. <!-- INDENTATION -->
    69. 

  69. <p>The basic operation of <i>tcpprep</i> is to compare each
    70. 

  70. packet from it&rsquo;s <i>input file</i> and compare it to
    71. 

  71. either a <i>regular expression</i> or against a list of
    72. 

  72. <i>CIDR</i>&rsquo;s. It then writes the result of this
    73. 

  73. comparison to the <i>cache file</i> for later use with
    74. 

  74. <i>tcpreplay</i>. This <i>cache file</i> is a string of
    75. 

  75. characters, with each bit representing a single packet. This
    76. 

  76. provides an efficent and portable means of storing the
    77. 

  77. necessary data.</p>
    78. 

  78. </td>
    79. 

  79. </table>
    80. 

  80. <a name="OPTIONS"></a>
    81. 

  81. <h2>OPTIONS</h2>
    82. 

  82. <!-- TABS -->
    83. 

  83. <table width="100%" border=0 rules="none" frame="void"
    84. 

  84.        cols="4" cellspacing="0" cellpadding="0">
    85. 

  85. <tr valign="top" align="left">
    86. 

  86. <td width="11%"></td>
    87. 

  87. <td width="7%">
    88. 

  88. 

  89. <p><b>&minus;a</b></p>
    90. 

  90. </td>
    91. 

  91. <td width="2%"></td>
    92. 

  92. <td width="77%">
    93. 

  93. 

  94. <p>Auto mode. Tcpprep will try to learn the roles of
    95. 

  95. systems on the network, and split traffic between the two
    96. 

  96. interfaces based upon whether a system is classified as a
    97. 

  97. &quot;server&quot; or &quot;client&quot;. Servers are sent
    98. 

  98. out the primary interface, clients out the secondary.
    99. 

  99. Requires the use of -n and excludes the use of -c, -p and
    100. 

  100. -r.</p>
    101. 

  101. </td>
    102. 

  102. <tr valign="top" align="left">
    103. 

  103. <td width="11%"></td>
    104. 

  104. <td width="7%">
    105. 

  105. 

  106. <p><b>&minus;c</b></p>
    107. 

  107. </td>
    108. 

  108. <td width="2%"></td>
    109. 

  109. <td width="77%">
    110. 

  110. 

  111. <p>CIDR mode. Specify a list of CIDR&rsquo;s
    112. 

  112. (network1/masklen1,network2/masklen2,...) to match against
    113. 

  113. the source IP of each packet. Packets matching any of the
    114. 

  114. CIDR&rsquo;s are sent out the primary interface; remaining
    115. 

  115. packets are sent out the secondary interface. Can&rsquo;t be
    116. 

  116. used with -r or -a.</p>
    117. 

  117. </td>
    118. 

  118. <tr valign="top" align="left">
    119. 

  119. <td width="11%"></td>
    120. 

  120. <td width="7%">
    121. 

  121. 

  122. <p><b>&minus;C</b></p>
    123. 

  123. </td>
    124. 

  124. <td width="2%"></td>
    125. 

  125. <td width="77%">
    126. 

  126. 

  127. <p>Imbed a comment in the tcpprep cache file which can be
    128. 

  128. later viewed via -P.</p>
    129. 

  129. </td>
    130. 

  130. <tr valign="top" align="left">
    131. 

  131. <td width="11%"></td>
    132. 

  132. <td width="7%">
    133. 

  133. 

  134. <p><b>&minus;h</b></p>
    135. 

  135. </td>
    136. 

  136. <td width="2%"></td>
    137. 

  137. <td width="77%">
    138. 

  138. 

  139. <p>Help.</p>
    140. 

  140. </td>
    141. 

  141. <tr valign="top" align="left">
    142. 

  142. <td width="11%"></td>
    143. 

  143. <td width="7%">
    144. 

  144. 

  145. <p><b>&minus;i</b></p>
    146. 

  146. </td>
    147. 

  147. <td width="2%"></td>
    148. 

  148. <td width="77%">
    149. 

  149. 

  150. <p>Input file (pcap format)</p>
    151. 

  151. </td>
    152. 

  152. <tr valign="top" align="left">
    153. 

  153. <td width="11%"></td>
    154. 

  154. <td width="7%">
    155. 

  155. 

  156. <p><b>&minus;m</b></p>
    157. 

  157. </td>
    158. 

  158. <td width="2%"></td>
    159. 

  159. <td width="77%">
    160. 

  160. 

  161. <p>Minimum mask length. Used in auto/router mode to set the
    162. 

  162. minimum valid network size. Defaults to 30 (bits).</p>
    163. 

  163. </td>
    164. 

  164. <tr valign="top" align="left">
    165. 

  165. <td width="11%"></td>
    166. 

  166. <td width="7%">
    167. 

  167. 

  168. <p><b>&minus;M</b></p>
    169. 

  169. </td>
    170. 

  170. <td width="2%"></td>
    171. 

  171. <td width="77%">
    172. 

  172. 

  173. <p>Maximum mask length. Used in auto/router mode to set the
    174. 

  174. maximum valid network size. Defaults to 8 (bits).</p>
    175. 

  175. </td>
    176. 

  176. <tr valign="top" align="left">
    177. 

  177. <td width="11%"></td>
    178. 

  178. <td width="7%">
    179. 

  179. 

  180. <p><b>&minus;n</b></p>
    181. 

  181. </td>
    182. 

  182. <td width="2%"></td>
    183. 

  183. <td width="77%">
    184. 

  184. 

  185. <p>Network type. Used to specify the network type in auto
    186. 

  186. mode as either bridge, client, server or router. Required
    187. 

  187. with -a.</p>
    188. 

  188. </td>
    189. 

  189. </table>
    190. 

  190. <!-- INDENTATION -->
    191. 

  191. <table width="100%" border=0 rules="none" frame="void"
    192. 

  192.        cols="2" cellspacing="0" cellpadding="0">
    193. 

  193. <tr valign="top" align="left">
    194. 

  194. <td width="10%"></td>
    195. 

  195. <td width="89%">
    196. 

  196. <p>Bridge mode processes each packet to try to determine if
    197. 

  197. the sender is a client or server. Once all the packets are
    198. 

  198. processed, the results are weighed according to the
    199. 

  199. server/client ratio (-R) and systems are assigned an
    200. 

  200. interface. If tcpprep is unable to determine what role a
    201. 

  201. system plays, tcpprep will abort.</p>
    202. 

  202. <!-- INDENTATION -->
    203. 

  203. <p>Client mode works just like bridge mode, except that
    204. 

  204. unclassified systems are treated as clients.</p>
    205. 

  205. <!-- INDENTATION -->
    206. 

  206. <p>Server mode works just like bridge mode, except that
    207. 

  207. unclassified systems are treated as servers.</p>
    208. 

  208. <!-- INDENTATION -->
    209. 

  209. <p>Router mode works just like bridge mode, except that
    210. 

  210. after weighing is done, systems which are undetermined are
    211. 

  211. considered a server if they fall inside a network known to
    212. 

  212. contain other servers. Router mode will never abort on
    213. 

  213. systems which can&rsquo;t be determined.</p>
    214. 

  214. <!-- INDENTATION -->
    215. 

  215. <p>Router mode trys to build a list of networks containing
    216. 

  216. only servers and unknown IP&rsquo;s. It starts out with very
    217. 

  217. large networks (8 bit netmask by default, change with -M)
    218. 

  218. and works it&rsquo;s way down to the minimum mask len (-m).
    219. 

  219. If tcpprep is unable to determine one or more networks which
    220. 

  220. only contains servers and unknowns, tcpprep will abort.</p>
    221. 

  221. <!-- INDENTATION -->
    222. 

  222. <p>Port mode looks at the source/destination port of the TCP
    223. 

  223. or UDP packet. Client traffic goes out the primary
    224. 

  224. interface, and server traffic out the secondary interface.
    225. 

  225. Non-TCP and UDP traffic goes out the same interface as
    226. 

  226. non-IP traffic does. Note that this mode does not track IP
    227. 

  227. addresses; so an IP may appear to jump between interfaces
    228. 

  228. depending on if it is the client or server.</p>
    229. 

  229. <!-- INDENTATION -->
    230. 

  230. <p>In all cases, servers are sent out the primary interface,
    231. 

  231. and clients out the secondary.</p>
    232. 

  232. </td>
    233. 

  233. </table>
    234. 

  234. <!-- TABS -->
    235. 

  235. <table width="100%" border=0 rules="none" frame="void"
    236. 

  236.        cols="4" cellspacing="0" cellpadding="0">
    237. 

  237. <tr valign="top" align="left">
    238. 

  238. <td width="11%"></td>
    239. 

  239. <td width="4%">
    240. 

  240. 

  241. <p><b>&minus;N</b></p>
    242. 

  242. </td>
    243. 

  243. <td width="5%"></td>
    244. 

  244. <td width="77%">
    245. 

  245. 

  246. <p>Non-IP packet classification. Non-IP datagrams (such as
    247. 

  247. arp) currently aren&rsquo;t handled by tcpprep. This option
    248. 

  248. allows you to define an interface to send them out. Default
    249. 

  249. is client.</p>
    250. 

  250. </td>
    251. 

  251. <tr valign="top" align="left">
    252. 

  252. <td width="11%"></td>
    253. 

  253. <td width="4%">
    254. 

  254. 

  255. <p><b>&minus;o</b></p>
    256. 

  256. </td>
    257. 

  257. <td width="5%"></td>
    258. 

  258. <td width="77%">
    259. 

  259. 

  260. <p>Output file (tcpreplay cache file)</p>
    261. 

  261. </td>
    262. 

  262. <tr valign="top" align="left">
    263. 

  263. <td width="11%"></td>
    264. 

  264. <td width="4%">
    265. 

  265. 

  266. <p><b>&minus;p</b></p>
    267. 

  267. </td>
    268. 

  268. <td width="5%"></td>
    269. 

  269. <td width="77%">
    270. 

  270. 

  271. <p>Port mode. Split TCP/UDP traffic based on the
    272. 

  272. destination port.</p>
    273. 

  273. </td>
    274. 

  274. <tr valign="top" align="left">
    275. 

  275. <td width="11%"></td>
    276. 

  276. <td width="4%">
    277. 

  277. 

  278. <p><b>-P</b></p>
    279. 

  279. </td>
    280. 

  280. <td width="5%"></td>
    281. 

  281. <td width="77%">
    282. 

  282. 

  283. <p>Print the embeded tcpprep cache file comment.</p>
    284. 

  284. </td>
    285. 

  285. <tr valign="top" align="left">
    286. 

  286. <td width="11%"></td>
    287. 

  287. <td width="4%">
    288. 

  288. 

  289. <p><b>&minus;r</b></p>
    290. 

  290. </td>
    291. 

  291. <td width="5%"></td>
    292. 

  292. <td width="77%">
    293. 

  293. 

  294. <p>Regex mode. Specifies a regular expression to match
    295. 

  295. against the source ip of each packet. Packets matching are
    296. 

  296. sent out the primary interface; remaining packets are sent
    297. 

  297. out the secondary interface. Can&rsquo;t be used with -a or
    298. 

  298. -c.</p>
    299. 

  299. </td>
    300. 

  300. <tr valign="top" align="left">
    301. 

  301. <td width="11%"></td>
    302. 

  302. <td width="4%">
    303. 

  303. 

  304. <p><b>&minus;R</b></p>
    305. 

  305. </td>
    306. 

  306. <td width="5%"></td>
    307. 

  307. <td width="77%">
    308. 

  308. 

  309. <p>The ratio of server connections to client connections
    310. 

  310. necessary to be classified as a server in auto mode. A
    311. 

  311. system is classified as a server if [# server connections]
    312. 

  312. &gt;= ([# client connections] * [ratio]). Default is:
    313. 

  313. 2.0</p>
    314. 

  314. </td>
    315. 

  315. <tr valign="top" align="left">
    316. 

  316. <td width="11%"></td>
    317. 

  317. <td width="4%">
    318. 

  318. 

  319. <p><b>&minus;x</b></p>
    320. 

  320. </td>
    321. 

  321. <td width="5%"></td>
    322. 

  322. <td width="77%">
    323. 

  323. 

  324. <p>Specifies which packets from the capture file(s) to
    325. 

  325. send. Can be one of:</p>
    326. 

  326. </td>
    327. 

  327. </table>
    328. 

  328. <!-- INDENTATION -->
    329. 

  329. <table width="100%" border=0 rules="none" frame="void"
    330. 

  330.        cols="2" cellspacing="0" cellpadding="0">
    331. 

  331. <tr valign="top" align="left">
    332. 

  332. <td width="21%"></td>
    333. 

  333. <td width="77%">
    334. 

  334. <p>S:&lt;CIDR1&gt;,... - Src IP must match specified
    335. 

  335. CIDR(s)<br>
    336. 

  336. D:&lt;CIDR1&gt;,... - Dst IP must match specified
    337. 

  337. CIDR(s)<br>
    338. 

  338. B:&lt;CIDR1&gt;,... - Both src and dst addresses must
    339. 

  339. match<br>
    340. 

  340. E:&lt;CIDR1&gt;,... - Either src or dst address must
    341. 

  341. match<br>
    342. 

  342. P:&lt;list&gt; - Must be one of the listed packets where the
    343. 

  343. list corresponds to the packet number in the capture file.
    344. 

  344. Ex: -x P:1-5,9,15 would only send packets 1 through 5, 9 and
    345. 

  345. 15.<br>
    346. 

  346. F:&quot;&lt;filter&gt;&quot; - BPF filter. See the
    347. 

  347. tcpdump(8) man page for syntax.</p>
    348. 

  348. </td>
    349. 

  349. </table>
    350. 

  350. <!-- TABS -->
    351. 

  351. <table width="100%" border=0 rules="none" frame="void"
    352. 

  352.        cols="4" cellspacing="0" cellpadding="0">
    353. 

  353. <tr valign="top" align="left">
    354. 

  354. <td width="11%"></td>
    355. 

  355. <td width="2%">
    356. 

  356. 

  357. <p><b>&minus;X</b></p>
    358. 

  358. </td>
    359. 

  359. <td width="7%"></td>
    360. 

  360. <td width="77%">
    361. 

  361. 

  362. <p>Specifies which packets from the capture file(s) to NOT
    363. 

  363. send. Can be one of:</p>
    364. 

  364. </td>
    365. 

  365. </table>
    366. 

  366. <!-- INDENTATION -->
    367. 

  367. <table width="100%" border=0 rules="none" frame="void"
    368. 

  368.        cols="2" cellspacing="0" cellpadding="0">
    369. 

  369. <tr valign="top" align="left">
    370. 

  370. <td width="21%"></td>
    371. 

  371. <td width="77%">
    372. 

  372. <p>S:&lt;CIDR1&gt;,... - Src IP must match specified
    373. 

  373. CIDR(s)<br>
    374. 

  374. D:&lt;CIDR1&gt;,... - Dst IP must match specified
    375. 

  375. CIDR(s)<br>
    376. 

  376. B:&lt;CIDR1&gt;,... - Both src and dst addresses must
    377. 

  377. match<br>
    378. 

  378. E:&lt;CIDR1&gt;,... - Either src or dst address must
    379. 

  379. match<br>
    380. 

  380. P:&lt;list&gt; - Must be one of the listed packets where the
    381. 

  381. list corresponds to the packet number in the capture file.
    382. 

  382. Ex: -X P:1-5,9,15 would send all packets except 1 through 5,
    383. 

  383. 9 and 15.</p>
    384. 

  384. </td>
    385. 

  385. </table>
    386. 

  386. <!-- TABS -->
    387. 

  387. <table width="100%" border=0 rules="none" frame="void"
    388. 

  388.        cols="4" cellspacing="0" cellpadding="0">
    389. 

  389. <tr valign="top" align="left">
    390. 

  390. <td width="11%"></td>
    391. 

  391. <td width="2%">
    392. 

  392. 

  393. <p><b>&minus;v</b></p>
    394. 

  394. </td>
    395. 

  395. <td width="7%"></td>
    396. 

  396. <td width="77%">
    397. 

  397. 

  398. <p>Enable verbose status printing to stderr. (Probably only
    399. 

  399. interesting for large input files.)</p>
    400. 

  400. </td>
    401. 

  401. <tr valign="top" align="left">
    402. 

  402. <td width="11%"></td>
    403. 

  403. <td width="2%">
    404. 

  404. 

  405. <p><b>&minus;V</b></p>
    406. 

  406. </td>
    407. 

  407. <td width="7%"></td>
    408. 

  408. <td width="77%">
    409. 

  409. 

  410. <p>Print version info and exit.</p>
    411. 

  411. </td>
    412. 

  412. </table>
    413. 

  413. <a name="SEE ALSO"></a>
    414. 

  414. <h2>SEE ALSO</h2>
    415. 

  415. <!-- INDENTATION -->
    416. 

  416. <table width="100%" border=0 rules="none" frame="void"
    417. 

  417.        cols="2" cellspacing="0" cellpadding="0">
    418. 

  418. <tr valign="top" align="left">
    419. 

  419. <td width="10%"></td>
    420. 

  420. <td width="89%">
    421. 

  421. <p>tcpdump(8), tcpreplay(8), capinfo(1), editcap(1)</p>
    422. 

  422. </td>
    423. 

  423. </table>
    424. 

  424. <a name="AUTHOR"></a>
    425. 

  425. <h2>AUTHOR</h2>
    426. 

  426. <!-- INDENTATION -->
    427. 

  427. <table width="100%" border=0 rules="none" frame="void"
    428. 

  428.        cols="2" cellspacing="0" cellpadding="0">
    429. 

  429. <tr valign="top" align="left">
    430. 

  430. <td width="10%"></td>
    431. 

  431. <td width="89%">
    432. 

  432. <p>Aaron Turner &lt;aturner@pobox.com&gt;</p>
    433. 

  433. <!-- INDENTATION -->
    434. 

  434. <p>The current version is packaged with tcpreplay which is
    435. 

  435. available via HTTP:</p>
    436. 

  436. </td>
    437. 

  437. </table>
    438. 

  438. <!-- INDENTATION -->
    439. 

  439. <table width="100%" border=0 rules="none" frame="void"
    440. 

  440.        cols="2" cellspacing="0" cellpadding="0">
    441. 

  441. <tr valign="top" align="left">
    442. 

  442. <td width="20%"></td>
    443. 

  443. <td width="79%">
    444. 

  444. 

  445. <p><i>http://www.sourceforge.net/projects/tcpreplay/</i></p></td>
    446. 

  446. </table>
    447. 

  447. <a name="BUGS"></a>
    448. 

  448. <h2>BUGS</h2>
    449. 

  449. <!-- INDENTATION -->
    450. 

  450. <table width="100%" border=0 rules="none" frame="void"
    451. 

  451.        cols="2" cellspacing="0" cellpadding="0">
    452. 

  452. <tr valign="top" align="left">
    453. 

  453. <td width="10%"></td>
    454. 

  454. <td width="89%">
    455. 

  455. <p>There may be a memory leak in the auto mode portion of
    456. 

  456. the code. I&rsquo;m seeing tcpprep growing to almost 15MB on
    457. 

  457. a 900MB input file.</p>
    458. 

  458. <!-- INDENTATION -->
    459. 

  459. <p>Accuracy in auto modes and handling of non-IP datagrams
    460. 

  460. could be improved by various means.</p>
    461. 

  461. <!-- INDENTATION -->
    462. 

  462. <p>It would be nice to support compressed files and other
    463. 

  463. file formats than just libpcap.</p>
    464. 

  464. <!-- INDENTATION -->
    465. 

  465. <p>Please send bug reports to aturner@pobox.com.</p>
    466. 

  466. </td>
    467. 

  467. </table>
    468. 

  468. <hr>
    469. 

  469. </body>
    470. 

  470. </html>
    471.