Multi-Pcap parser

William Metcalf released a rough perl script he uses to
parse multiple
large pcaps for attacker traffic.

Very useful tool. You can see it here:

http://doc.bleedingthreats.net/bin/view/Main/PcapParser

Matt

-- 
--------------------------------------------
Matthew Jonkman
Bleeding Edge Threats
US Phone 765-429-0398
US Fax 312-264-0205
AUS Phone 61-42-4157-491
AUS Fax 61-29-4750-026
http://www.bleedingthr
eats.net
--------------------------------------------

PGP: http:/
/www.bleedingthreats.com/mattjonkman.asc


_______________________________________________
Bleeding-sigs mailing list
Bleeding-sigsbleedingthreats.net
http://lists.bleedingthreats.net/cgi-bin/
mailman/listinfo/bleeding-sigs

Below is a link to a description of the tool.  Hopefully
somebody will
find it useful 

Regards,

Will

http://node5.blogspot.com/2007/08/pars
ep-extend-rangepl-your-friendly.html

On 10/8/07, Matt Jonkman <jonkmanbleedingthreats.net>
wrote:
> William Metcalf released a rough perl script he uses to
parse multiple
> large pcaps for attacker traffic.
>
> Very useful tool. You can see it here:
>
> http://doc.bleedingthreats.net/bin/view/Main/PcapParser
>
> Matt
>
> --
> --------------------------------------------
> Matthew Jonkman
> Bleeding Edge Threats
> US Phone 765-429-0398
> US Fax 312-264-0205
> AUS Phone 61-42-4157-491
> AUS Fax 61-29-4750-026
> http://www.bleedingthr
eats.net
> --------------------------------------------
>
> PGP: http:/
/www.bleedingthreats.com/mattjonkman.asc
>
>
> _______________________________________________
> Bleeding-sigs mailing list
> Bleeding-sigsbleedingthreats.net
> http://lists.bleedingthreats.net/cgi-bin/
mailman/listinfo/bleeding-sigs
>
_______________________________________________
Bleeding-sigs mailing list
Bleeding-sigsbleedingthreats.net
http://lists.bleedingthreats.net/cgi-bin/
mailman/listinfo/bleeding-sigs