Network Grep for Linux

Giới Thiệu · Network Grep for Linux

Network Grep for Linux is a pcap-aware tool that will allow you to specify extended regular or hexadecimal expressions to match against data payloads of packets. Network Grep for Linux currently recognizes IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw across Ethernet, PPP, SLIP, FDDI, Token Ring and null interfaces, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop. Network Grep for Linux fixed bug bug where setting the snaplen smaller than the minimum necessary to read full headers would cause garbage to be fed into the pattern matcher, fixed unreported bug in IPv6/TCP packet length calculation,and relocated the privilege-dropping routine to be invoked right before entering the packet processing loop, to prevent interference with necessary permissions to read or write dumpfiles.