[Snort-sigs] pcap comparison too;

Joel Esler jesler at ...435...
Wed Aug 29 09:27:39 EDT 2012


On Aug 28, 2012, at 10:15 PM, David Wilson <dadamw at ...2420...> wrote:

> Hello,
> 
> I’m looking for a tool compares .pcap files and reports differences and similarities at the hex value level for the eventual development of Snort rules.  Have you ever heard of or used such a thing?   Thank you very much for your help.

I've never used it, but I thought "hmm..  let's google the words pcap and diff"

http://sourceforge.net/projects/pcapdiff/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20120829/8306cb05/attachment.html>


More information about the Snort-sigs mailing list