Hi Bob, On Wednesday 19 May 2010 18:21:23 Bob McConnell wrote: > I am looking for some strategic help. I am about to receive several days > worth of Wireshark captures from two ends of an OpenVPN connection. > These will show the public view of traffic over that connection. I have > been asked to determine the variation in transport time between the two > NICs. I do not expect the two clocks to be in sync, so I think I am > looking to find the MIN and MAX delta between the timestamps. I can use > the ACK/SEQ numbers to match the packets, then calculate the time > difference. > > Is there a Perl parser for pcap binary files? > > The initial goal is to determine if there is more than a 10 second > difference between MIN and MAX. IF there is, how frequently does it > reach the high end. Yes, we are having timeout issues with the > applications talking over this connection. > > Any suggestions?
I think pcap_open_offline in http://search.cpan.org/perldoc?Net::Pcap should do the trick. Net::Pcap has a good reputation, and I think I also successfully did something small with it. Regards, Shlomi Fish -- ----------------------------------------------------------------- Shlomi Fish http://www.shlomifish.org/ Freecell Solver - http://fc-solve.berlios.de/ God considered inflicting XSLT as the tenth plague of Egypt, but then decided against it because he thought it would be too evil. Please reply to list if it's a mailing list post - http://shlom.in/reply . -- To unsubscribe, e-mail: beginners-unsubscr...@perl.org For additional commands, e-mail: beginners-h...@perl.org http://learn.perl.org/