Beefy Boxes and Bandwidth Generously Provided by pair Networks
We don't bite newbies here... much
 
PerlMonks  

Re: Is there a way to crack .CAP file in Perl?

by haukex (Bishop)
on May 08, 2016 at 09:41 UTC ( #1162480=note: print w/replies, xml ) Need Help??


in reply to Is there a way to crack .CAP file in Perl?

Hi Muskovitz,

Several years ago I wrote a script using Net::Pcap and NetPacket to read a capture file - however, there is a lot of low-level decoding involved (e.g. reassembling IP fragments is fun), and a lot of re-inventing the wheel. So my suggestion would be that you use the already highly advanced features of Wireshark, which you can access from the command line via tshark, to get at the data in the capture file and filter it, and have tshark output it in a format your Perl program can parse. In your Perl program you can capture the data from tshark using a module like Capture::Tiny.

Hope this helps,
-- Hauke D

  • Comment on Re: Is there a way to crack .CAP file in Perl?

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://1162480]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others scrutinizing the Monastery: (4)
As of 2020-11-01 01:50 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?
    My favourite web site is:












    Results (291 votes). Check out past polls.

    Notices?