multisniff

multisniff is a packet sniffing tool I wrote for recording traffic while doing concurrent protocol interoperability tests.

It's very similar to tcpdump, except it keeps separate pcap files for each recording session by IP address. A recording session is defined as any traffic seen originating from or destined towards a given IP address within a configurable amount of time.

There are no binary distributions of this application. In order to build your own, scons is required. I had switched to scons after I got tired of dealing with autoconf/make sucking for too long.

Usage

General usage is modeled after tcpdump, so it should be familiar to anyone who'd be capturing packets. The notable differences are that you must specify a directory to write the pcap files (with the -d option) and a capture interface. More details are available from the built-in help.

License

This software is licensed under the MIT license.

Download

download tip

Source

mercurial repository (changelog, checkout, etc...)