Re: [tcpdump-workers] Email Content Extraction From payload

2009-04-06 Thread Shameem Ahamed
009 12:14:14 -0700 > From: l...@yahoo.com > Subject: Re: [tcpdump-workers] Email Content Extraction From payload > To: tcpdump-workers@lists.tcpdump.org > > > At about Friday, April 3, 2009 4:01:05 AM Shameem Ahamed > wrote: > ... > >In that one also, i have tried

Re: [tcpdump-workers] Email Content Extraction From payload

2009-04-03 Thread Leonard Mills
At about Friday, April 3, 2009 4:01:05 AM Shameem Ahamed wrote: ... >In that one also, i have tried to print the data part in a file using the >callback function and all the data was in binary format. ... If you're seeing binary during SMTP DATA and it's not in a binary MIME part/attachment,

Re: [tcpdump-workers] Email Content Extraction From payload

2009-04-03 Thread Tobias Weber
On 03.04.2009, at 17:14, Shameem Ahamed wrote: Problem is , when i try to print the payload (It is represented as a pointer to the u_char data type), it gives me binary data , of course it includes some ascii data ( the http request headers). Is one of them, by any chance, "Content-Encoding

Re: [tcpdump-workers] Email Content Extraction From payload

2009-04-03 Thread Shameem Ahamed
mp.org > Subject: Re: [tcpdump-workers] Email Content Extraction From payload > Date: Fri, 3 Apr 2009 13:38:24 + > > Shameem Ahamed wrote: > > > Yes, i am getting the payload. But the only thing is the payload is in > > binary format. > > I have no idea what that

Re: [tcpdump-workers] Email Content Extraction From payload

2009-04-03 Thread Julian Mehnle
Shameem Ahamed wrote: > Yes, i am getting the payload. But the only thing is the payload is in > binary format. I have no idea what that means. What protocol are you trying to analyze? HTTP? SMTP? If it's either of those, then there's nothing particularly "binary" about them, unless HTTP com

Re: [tcpdump-workers] Email Content Extraction From payload

2009-04-03 Thread Shameem Ahamed
library, which helps to do this?. I am trying to capture the webmail traffic, Like Yahoo!, AOL Mail etc. Regards, Shameem > From: jul...@mehnle.net > To: tcpdump-workers@lists.tcpdump.org > Subject: Re: [tcpdump-workers] Email Content Extraction From payload > Date: Fri, 3 Apr

Re: [tcpdump-workers] Email Content Extraction From payload

2009-04-03 Thread Julian Mehnle
Shameem Ahamed wrote: > I have tried a small code with libnids in my ubuntu machine. > > I have modified the sample code provided by Rafal Wojtczuk in the > libnids main page. > > In that one also, i have tried to print the data part in a file using > the callback function and all the data was

Re: [tcpdump-workers] Email Content Extraction From payload

2009-04-03 Thread Shameem Ahamed
ata. I want to strip the higher level data and get only the data. Regards, Shameem > From: jul...@mehnle.net > To: tcpdump-workers@lists.tcpdump.org > Subject: Re: [tcpdump-workers] Email Content Extraction From payload > Date: Fri, 3 Apr 2009 09:10:53 + > > Shameem Ahame

Re: [tcpdump-workers] Email Content Extraction From payload

2009-04-03 Thread Julian Mehnle
Shameem Ahamed wrote: > I want to get the e-mail details (Email Body, Subject, To, CC and > attachment details) from the e-mail send pcap i created using > wireshark. > > Can any one help me regarding this ?. > > I am doing a project to capture and present high level (layer 7) data > content(paylo

[tcpdump-workers] Email Content Extraction From payload

2009-04-03 Thread Shameem Ahamed
Hi All, I want to get the e-mail details (Email Body, Subject, To, CC and attachment details) from the e-mail send pcap i created using wireshark. Can any one help me regarding this ?. I am doing a project to capture and present high level (layer 7) data content(payload) from pcap file Rega