OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1999: Re: X-based sniffer-netxmon

Re: X-based sniffer-netxmon

routeRESENTMENT.INFONEXUS.COM
Thu, 29 Apr 1999 11:44:15 -0700 

{Zhang Qianli}
> When I first saw the software ttywatcher, I wondered why not changed it
> into an X-interfaced sniffer. This thought has proved not as easy as I had
> thought. And after about severl months' work, at last the netxmon come into
> being.

    Ethereal, http://ethereal.zing.org, is a stable portable network
    traffic analyzer running on top of tcpdump that sports a nice GTK-based
    interface.

    Oh yah.  Use libnet.  http://www.packetfactory.net/libnet

--
libnet_build_ethernet(de, se, 0x0800, NULL, 0, buf);
libnet_build_ip(0x14, 0, 1, 0, 1, 6, si, di, NULL, 0, buf + 0xe);
libnet_build_tcp(sp, dp, 1, 2, 2, 0xffff, 0, NULL, 0, buf + 0x14 + 0xe);