pkt2flow
pkt2flow copied to clipboard
seq/seq_ack analyze?
What about analyzing seq/seq ack to split connections with same ip/ports? I know it's a bit complicated, maybe add it as option. It'll be useful for big PCAP files gathered in long time and filtered by src and dst IP addr if there will be 100000 tcp sessions for example. It's already done by https://github.com/wireshark/wireshark, but I can't find exact place of implementation.