ngrep
ngrep strives to provide most of GNU grep's common features,
applying them to the network layer.
ngrep
is a pcap-aware tool that will allow you to specify extended regular or
hexadecimal expressions to match against data payloads of packets.
It
currently recognizes IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw across
Ethernet, PPP, SLIP, FDDI, Token Ring and null interfaces, and
understands BPF filter logic in the same fashion as more common packet
sniffing tools, such as tcpdump and snoop.
Features include:
- Basic Packet Sniffing
- Debug HTTP interactions
- Process PCAP dump files looking for patterns
- Observing binary being transferred across the wire
Return
to Security Home Page
Last Updated Sunday, August 09 2009 @ 12:30 PM EDT
| 
