Re: examining data portion of packet

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Have you looked at Snort - http://www.snort.org
that will allow you to look for patterns in the application layer
payload - John

On Wed, 2004-03-24 at 12:22, Sandy C wrote:
> I'd like to be able to examine the network data, and
> if the data (not the header info) matches certain
> criteria, I want to perform certain actions. Its not
> clear to me what those actions might be yet.
> 
> S C 
> 
> --- "John A. Sullivan III"
> <john.sullivan@xxxxxxxxxxxxx> wrote:
> > On Wed, 2004-03-24 at 00:45, Sandy C wrote:
> > >    I would like to be able to be able to examine
> > the
> > > data portion of a network packet after matching
> > it. 
> > > 
> ..
> > >    What is the best way to go about this? Should I
> > be
> > > thinking of writing a target extension?
> > <snip>
> > It depends on what you want to do.  What do you want
> > to do with the
> > information?
> > -- 
> > John A. Sullivan III
> 
> 
> __________________________________
> Do you Yahoo!?
> Yahoo! Finance Tax Center - File online. File on time.
> http://taxes.yahoo.com/filing.html
-- 
John A. Sullivan III
Chief Technology Officer
Nexus Management
+1 207-985-7880
john.sullivan@xxxxxxxxxxxxx



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux