http connections

http connections

Secure Home | Search | About
 Computer Software Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
http connections =?UTF-8?B?QWRyacOhbg==?= Ribao 06-24-2006
Posted by =?UTF-8?B?QWRyacOhbg==?= Ribao on June 24, 2006, 3:55 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello.
I have been trying to use a sniffer to save in a file all the http
conections, I'm only interested in the HTML code of each connection, but I
don't know how can I do it.
I've been using tcpdump and ethereal under Suse Linux 10.1.
Can I with those programs running in backgraund get all the HTML content and
log it in a file?

Thank you very much.

Posted by imhotep on June 24, 2006, 9:40 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Adrián Ribao wrote:

> Hello.
> I have been trying to use a sniffer to save in a file all the http
> conections, I'm only interested in the HTML code of each connection, but I
> don't know how can I do it.
> I've been using tcpdump and ethereal under Suse Linux 10.1.
> Can I with those programs running in backgraund get all the HTML content
> and log it in a file?
>
> Thank you very much.

Yes you can. Put a sniffer pc with ethereal and set it up to log all http
traffic. You can configure a switch to "port mirror" or use a hub (not a
switch!) Make sure you configure it to save 100% of the packet (by default
I think it save just a couple of bytes of the application layer). I would
offer two pieces of advice:

1) Have lots of disk space
2) Only sniff http traffic to minimize things (disk space, interface
throughput)

I hope that helps,
Imhotep

--
*************************************
Pass a Net Neutrality Law in the US!!!!

Save the Internet:
http://www.savetheinternet.com/

Its our net:
http://www.itsournet.org/

*************************************

Posted by =?UTF-8?B?QWRyacOhbg==?= Ribao on June 25, 2006, 8:27 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Thank you.
I have done that before, but my problem is get the HTML content from the
captured data. One soultion would be to save the data in XML format and
then apply XSLT. But I was wondering if is there any better way.
I don't care about the package info and all that stuff, I'm only interested
in the HTML data.
Thank you very much!


imhotep wrote:

> Adrián Ribao wrote:
>
>> Hello.
>> I have been trying to use a sniffer to save in a file all the http
>> conections, I'm only interested in the HTML code of each connection, but
>> I don't know how can I do it.
>> I've been using tcpdump and ethereal under Suse Linux 10.1.
>> Can I with those programs running in backgraund get all the HTML content
>> and log it in a file?
>>
>> Thank you very much.
>
> Yes you can. Put a sniffer pc with ethereal and set it up to log all http
> traffic. You can configure a switch to "port mirror" or use a hub (not a
> switch!) Make sure you configure it to save 100% of the packet (by default
> I think it save just a couple of bytes of the application layer). I would
> offer two pieces of advice:
>
> 1) Have lots of disk space
> 2) Only sniff http traffic to minimize things (disk space, interface
> throughput)
>
> I hope that helps,
> Imhotep
>


Posted by imhotep on June 25, 2006, 12:09 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Adrián Ribao wrote:

> Thank you.
> I have done that before, but my problem is get the HTML content from the
> captured data. One soultion would be to save the data in XML format and
> then apply XSLT. But I was wondering if is there any better way.
> I don't care about the package info and all that stuff, I'm only
> interested in the HTML data.
> Thank you very much!
>
>
> imhotep wrote:
>
>> Adrián Ribao wrote:
>>
>>> Hello.
>>> I have been trying to use a sniffer to save in a file all the http
>>> conections, I'm only interested in the HTML code of each connection, but
>>> I don't know how can I do it.
>>> I've been using tcpdump and ethereal under Suse Linux 10.1.
>>> Can I with those programs running in backgraund get all the HTML content
>>> and log it in a file?
>>>
>>> Thank you very much.
>>
>> Yes you can. Put a sniffer pc with ethereal and set it up to log all http
>> traffic. You can configure a switch to "port mirror" or use a hub (not a
>> switch!) Make sure you configure it to save 100% of the packet (by
>> default I think it save just a couple of bytes of the application layer).
>> I would offer two pieces of advice:
>>
>> 1) Have lots of disk space
>> 2) Only sniff http traffic to minimize things (disk space, interface
>> throughput)
>>
>> I hope that helps,
>> Imhotep
>>

It sounds like you want to reconstruct the http data yes? Humm...good
question. I have not gone that deep with the sniffer but I am sure there is
way....try posting to one of the linux/ethereal groups...also, post back
your results. You have made me curious...

Imhotep

--
*************************************
Pass a Net Neutrality Law in the US!!!!

Save the Internet:
http://www.savetheinternet.com/

Its our net:
http://www.itsournet.org/

*************************************

Posted by Antares on June 25, 2006, 12:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> It sounds like you want to reconstruct the http data yes? Humm...good
> question. I have not gone that deep with the sniffer but I am sure there is
> way....try posting to one of the linux/ethereal groups...also, post back
> your results. You have made me curious...
>
> Imhotep

Ok, I will. I hope I could do it.
See you.

Similar ThreadsPosted
Curious HTTP connections October 16, 2006, 1:31 pm
Which of these netstat connections should be banned on WinXP? March 23, 2006, 2:57 am
Turning off the "Ad hoc" option for OS X airport connections May 7, 2008, 10:18 am
HTTP attack or not? August 12, 2005, 5:13 am
HTTP Scan without Log May 14, 2006, 2:14 pm
Error 502: Concurrent Connections Limit in Avast! July 5, 2007, 12:14 pm
where can i telnet or do insecure http form? November 29, 2005, 1:47 pm
http://agentdq.t35.com/ - virus storage February 26, 2006, 10:42 am

The site map in XML format XML site map

Contact Us | Privacy Policy