On Fri, Jun 12, 2009 at 12:39 PM, Darien Kindlund<dar...@kindlund.com> wrote: >> Honestly, if you only wanted to do that single test case, the simplest >> thing would be to install Bind & Apache and configure bind to resolve >> yahoo & google to your local box and have Apache serve up the >> appropriate pages via vhosts. That would take an experienced sysadmin >> an hour or less. > > If I were simply dealing with static pages, sure; however, I'm trying > to do a little application layer re-writing / munging as possible. By > focusing on resolving the issues at the lowest layers possible, the > overall solution can eventually impact protocols other than HTTP.
Well you are dealing with static pages- the pcaps are static. If you just did a File->Save As for each page, save as a html file and configure Apache to serve up the pages you'd be cool. No reason your pages have to be dynamically generated. If all you have is pcap's to work off of, Wireshark can save off streams to files. Of course, Apache won't help you much beyond HTTP. Anyways, at my day job we have to solve these kinds of problems. To do so, we tried classifying different protocols based on their complexity and need for dynamic fields. Long story short, protocols are becoming more dynamic and are requiring greater inter-dependence. Crypto which often has protection against replay attacks seems to be showing up more and more. Hence, like you, we're initially targeting a smaller subset of use cases: http://www.mudynamics.com/products/modules/mu-studio.html </shameless plug> Anyways, I don't want to dissuade you from working on something like flowreplay, even if it has limited protocol support. There *is* a need for this and no doubt you'd make quite a few people happy. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin ------------------------------------------------------------------------------ Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
