I have a tracefile and I want to ﬁnd all web servers that were successfully visited in the trace, contacted via HTTP.
tcpdump -r file.trace - tcp port 80
Maybe I have to search for a list of server IP that send response packets to me (I mean those that create HTTP sessions with me). Just servers, not other TCP connections. I mean, I need server IPs that answer to HTTP requests and send HTTP responses back.