#sniffer
sniffer capture http packet in gopacket(libpcap).
The sniffer project captures packets through pcap and parses the http protocol. The fetched results will be stored in the database. He also provides a webserver interface to view packet capture results.
install libpcap
for ubuntu/debian:
sudo aptitude install libcap-dev
for centos/redhat/fedora:
sudo yum install libpcap-devel
#depend
go get github.com/asmcos/requests
make
make
run
nohup ./sniffer -i eth0 &
#Support Config Json file
sniffer.json
{
"name": "sniffer",
"device": "en0",
"port":80
}
Save data to webserver
The sniffer can store data to a remote server or not save the data. You can submit data through serverurl.
How to config serverurl?
vim sniffer.json
"serverurl":"http://127.0.0.1:1337/", //Save data to server
"serverurl":"" //Don't save data
How to build data server ?
See https://github.com/asmcos/AIDatas
capture example:
192.168.10.110->175.27.0.201:54893->80
extshort.weixin.qq.com
POST /mmtls/1d70cf00 HTTP/1.1
Connection :[close]
Content-Length :[542]
Content-Type :[application/octet-stream]
Upgrade :[mmtls]
User-Agent :[MicroMessenger Client]
Accept :[*/*]
Cache-Control :[no-cache]
175.27.0.201->192.168.10.110:80->54893
HTTP/1.1 200 OK
Content-Type :[application/octet-stream]
Content-Length :[229]
View results through webserver
http://zhanluejia.net.cn:8080/httpdata/
