Re: tcptrace-bugs Packet level module development

From: Shawn Ostermann (sdo@picard.cs.ohiou.edu)
Date: 03/06/06

• Next message: Joshua Blanton: "tcptrace-bugs [Fwd: Support for Large Trace Files]"
• Previous message: yumiko: "tcptrace-bugs $BEPO?<T=w@-$h$j!D!#(B"
• In reply to: M. Axworthy: "tcptrace-bugs Packet level module development"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Subject: Re: tcptrace-bugs Packet level module development 
Date: Mon, 06 Mar 2006 09:45:47 -0500
From: Shawn Ostermann <sdo@picard.cs.ohiou.edu>
Message-Id: <20060306144547.D0D50DEA9B8@picard.cs.ohiou.edu>

M. Axworthy <mxzh@comcast.net> wrote:

> Hi, Is there a way to get into a module at the packet level
> (e.g. packet by packet) vs. at the connection summary level? Next
> question: looking to create a grep-like module that can search for
> specific patterns contained within the packet payload. Does something
> like this already exist?

Sure. Any module can ask to be passed each packet as it is read in.

See mod_realtime.[ch] or mod_http.[ch] for examples.

Shawn

• application/pgp-signature attachment: stored

• Next message: Joshua Blanton: "tcptrace-bugs [Fwd: Support for Large Trace Files]"
• Previous message: yumiko: "tcptrace-bugs $BEPO?<T=w@-$h$j!D!#(B"
• In reply to: M. Axworthy: "tcptrace-bugs Packet level module development"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.7 : 03/06/06 EST