Pakket: chaosreader (0.96-5)

trace network sessions and export it to html format

Chaosreader traces TCP/UDP/others sessions and fetches application data from snoop or tcpdump logs (or other libpcap compatible programs). This is a type of "any-snarf" program, as it will fetch telnet sessions, FTP files, HTTP transfers (HTML, GIF, JPEG etc) and SMTP emails from the captured data inside network traffic logs. A html index file is created to that links to all the session details, including realtime replay programs for telnet, rlogin, IRC, X11 and VNC sessions. Chaosreader reports such as image reports and HTTP GET/POST content reports.

It also creates replay programs for telnet sessions, so that you can play them back in realtime (or even different speeds).

Chaosreader can also run in standalone mode, where it invokes tcpdump or snoop (a similar to tcpdump program for Solaris) to create the log files and then processes them.

This package is useful for forensics investigations and for network traffic analysis.

Tags: System Administration: Monitoring, Implemented in: Perl, User Interface: interface::commandline, role::program, Scope: Utility, Purpose: Data Conversion, use::monitor, works-with::logfile, Works with: Network Traffic

This page is also available in the following languages (How to set the default document language):