I created a virtualized environment with an Apache server (running in Debian) and several attacking machines running Debian as well. We used VMware Workstation.
Server IP: 192.168.91.5
I have dump file (PCAP) collected with tcpdump. Is there any way to estimate (or calculate) server response time every 60 seconds? The IP addresses of the attackers are of the form 192.168.91.X
PCAP file example:
SamplePCAPfiles:
link
I tried to use tcprstat but the result always gives zero, which is undoubtedly wrong: / p>
tcprstat -r semAtaques.pcap -f '%n\n' -p 80 -t 1 -n 0