23 Feb
2012
23 Feb
'12
3:11 p.m.
Hello, I am trying to collect traffic traffic from pcap file and store it in a database but really confused how to organize it. Should I organize it on connection basis/ flow basis or IP basis. It might be an effort to write a customized traffic analysis tool like wireshark with only required functionality. I would really appreciate if someone can give me direction on write way of organizing the data because right now I only see individual packets and no way of putting them in some order. Best, Ali