Skip to content
/ sniffer Public

Sniffer is an http packet capture tool, base on golang gopacket(libpcap)

License

Notifications You must be signed in to change notification settings

asmcos/sniffer

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

#sniffer

sniffer capture http packet in gopacket(libpcap).

The sniffer project captures packets through pcap and parses the http protocol. The fetched results will be stored in the database. He also provides a webserver interface to view packet capture results.

install libpcap

for ubuntu/debian:

sudo aptitude install libcap-dev

for centos/redhat/fedora:

sudo yum install libpcap-devel

#depend

go get github.com/asmcos/requests 

make

make

run

nohup ./sniffer -i eth0 &

#Support Config Json file

sniffer.json

{
  "name": "sniffer",
  "device": "en0",
  "port":80
}

Save data to webserver

The sniffer can store data to a remote server or not save the data. You can submit data through serverurl.

How to config serverurl?

vim sniffer.json
"serverurl":"http://127.0.0.1:1337/", //Save data to server
"serverurl":"" //Don't save data

How to build data server ?

See https://github.com/asmcos/AIDatas

capture example:

192.168.10.110->175.27.0.201:54893->80

extshort.weixin.qq.com
POST /mmtls/1d70cf00 HTTP/1.1 
Connection :[close]
Content-Length :[542]
Content-Type :[application/octet-stream]
Upgrade :[mmtls]
User-Agent :[MicroMessenger Client]
Accept :[*/*]
Cache-Control :[no-cache]

175.27.0.201->192.168.10.110:80->54893

HTTP/1.1 200 OK
Content-Type :[application/octet-stream]
Content-Length :[229]

View results through webserver

http://zhanluejia.net.cn:8080/httpdata/

image image

Use AIDatas and sniffer for linkage

https://note.youdao.com/s/BdhDLrwb

About

Sniffer is an http packet capture tool, base on golang gopacket(libpcap)

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published