David Steuber on 17 Oct 2003 13:59:04 -0400


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: tcpdump as an inferior Perl process


On Thu, Oct 16, 2003 at 08:38:37PM -0400, Meng Weng Wong wrote:
> On Thu, Oct 16, 2003 at 08:03:53PM -0400, David Steuber wrote:
> | Hi JAPHs,
> | 
> | Can anyone recomend any Perl modules for parsing packets emited by
> | tcpdump with its -w param?  I wish to be able to inspect the payload
> | data as well as packet header data (at both ip and ether levels).
> | 
> 
> seems like tcpflow would be an easier tool.

I wasn't aware that program existed, but I have it.  I will look it up.

Part of this excercise is for learning how to reverse engineer a
protocol.  Getting down the recording of streams that I am listening to
quickly is good though.

-- 
David Steuber           |  telco:610.436.1677
302 E Marshall St       |  http://www.david-steuber.com/
Apt 612                 |  (do ((a 1 b) (b 1 (+ a b)))
West Chester, PA 19380  |      (nil a) (print a))
-
**Majordomo list services provided by PANIX <URL:http://www.panix.com>**
**To Unsubscribe, send "unsubscribe phl" to majordomo@lists.pm.org**