[ILUG] Compare TCP captures from both ends of a connection

[Michael Kennedy]

Kenn,

Maybe check up on:
   - NetworkMiner - on SourceForge
   - NetWitness - http://www.netwitness.com/
...in case they'll help.

I've not used either of them, but saw a video on them somewhere 
recently, and they looked impressive.

   - Mike K.


Kenn Humborg wrote:
> I've got network packet captures from both ends of 
> a TCP connection and I'm try to figure out what's
> happening during some intermittent packet-loss
> episodes.
> 
> Currently, I'm looking at both traces in two Wireshark
> windows, but it's less than ideal.
> 
> Does anyone know of a tool that would load up both
> captures, synch them up (without having tight clock
> sync at both ends) and tell me things like 
> 
> o  This packet took N ms to get to the other side
> o  This packet was received N times
> o  This packet was received out of order
> o  This packet was lost
> 
> etc.
> 
> Later,
> Kenn
> 
>