Topic created on: August 22, 2008 20:26 CDT by MohammadHosein .

i will be doing it as a pet project of mine , just wanted to post the question here too before reinventing anything

is there any public tool to diff pcap files based on both packet's fields and TCP session content ? i'm looking for something like bindiff , but for both packets and sessions

all the bests
-mh