Beefy Boxes and Bandwidth Generously Provided by pair Networks
P is for Practical
 
PerlMonks  

Parsing tcpdump Files

by ketema (Scribe)
on Oct 28, 2005 at 17:23 UTC ( [id://503712]=perlquestion: print w/replies, xml ) Need Help??

ketema has asked for the wisdom of the Perl Monks concerning the following question:

Hello monks, I was wondering if anyone had experience using perl to analyze tcpdump logs, specifically those created by ethereal. I have found the module Net::TcpDumpLog, and would like to know if I will be able to perform the following with it:

1)Parse a log and search for files by name|extension|type
2)Extract and save files found through 1.
3)For Http data extract the complete request url for any files found via 1.

I have a lot of reading ahead of me, so if anyone has performed duties like these and has scripts available that would be nice, but even with no scripts comments on whether or not I'm in the right starting place would be of assistance as well. Thanks!

Replies are listed 'Best First'.
Re: Parsing tcpdump Files
by planetscape (Chancellor) on Oct 28, 2005 at 19:23 UTC
Re: Parsing tcpdump Files
by cazz (Pilgrim) on Oct 28, 2005 at 19:58 UTC
    You want Net::Pcap. Though, you might be better off using some other tools such as dsniff to find files/URLS.

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: perlquestion [id://503712]
Approved by Corion
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others learning in the Monastery: (4)
As of 2024-04-19 04:31 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found