On 19 mrt 2010, at 20:21, Jeff Morriss wrote:
> Kamens, Jonathan wrote:
>> In a nutshell, I want to capture TCP packets on two hosts and then run
>> the two packet captures through a tool which analyzes both sides of the
>> connection and highlights anomalies. The one I'm most interested in is
>> packets that were sent by one side and never received by the other.
>>
>> Does anything like this exist?
>
> I think pcapdiff is supposed to do that:
>
> http://www.eff.org/testyourisp/pcapdiff/
And wireshark (a recent development version) is also capable of comparing tracefiles. See the following bugs:
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2589
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3724
Cheers,
Sake