pcap file which contain regular transit routers traffic to test firewall rule set

kikilinux · 11-18-2014, 12:06 PM

I am working on a packet calssification project.
I want a pcap file which contain regular or any traffic from transit router to send to my project and check the rule set.
The rule set obtain from real filter set and I want to find real traffic too.
therefor, I think PCAP file which may publicly available to test the firewall rule set.
Anybody knows where can I find these pcap files?

nini09 · 11-19-2014, 02:16 PM

You can use tcpdump to capture real traffic and save them as a PCAP file.

kikilinux · 11-20-2014, 06:24 AM

I know but does my traffic have same statistics as transit router or big organization networks has ?

nini09 · 11-20-2014, 02:23 PM

It is depadent on network topology. If you want to capture all traffic that send out from router, the router should be behind the monitoring or capturing device. That means that router connect to capturing device only.

kikilinux · 11-20-2014, 05:00 PM

Dear nini09
Tnx for ur answer but maybe u haven't understand my problem well.
I work at home, the traffic that I generate to internet does not have the same variety that a transit router has.
I need different kind of traffic, not only simple captured traffic which can be find in ISP routers or Transit router ...

nini09 · 11-21-2014, 02:24 PM

If your real problem is relative to traffic generation, a lot of tool for Linux can do it, such as Ostinato. It is called as wireshark in reverse and is open-source. Some distribution include its support.