PDA

View Full Version : [SOLVED] little help to understand pcap



Mr.Pytagoras
February 24th, 2012, 03:07 PM
Hi

I need to write a program that would take the output file of tcpdump and print its content to stdout in hex form, after that I have to do some analyzing, like if the comunication is SSH, FTP, HTTT... , ethernet type ... etc.

I don't want the entire code but some hint or explanation of how it works and how should I do it.

On a second thought, maybe little code fragment would by nice to see ;)

pconroy
February 26th, 2012, 07:18 AM
Are you asking for some help understanding how libpcap works?
Or are you asking to see some example code on how to print data in hex?

Mr.Pytagoras
February 26th, 2012, 12:44 PM
I was hoping in some explanation how it works

But I have already learned some stuff about it, also I have coded some things so I don't need examples now.

Writing packets to stdout in hex form was easy :)

Anyway thanks

But if anybody want to reply some useful informations or examples or point-of-views to this thread fell free I will keep it open for some time and then I will mark it as solved