Re: [tcpdump-workers] reconstruct HTTP requests in custom sniffer

2011-01-07 Thread Cedric Cellier
> I am asked to write a custom sniffer with libpcap on Linux that has to > handle a load of 50.000 packets per second. The sniffer has to detect all > HTTP requests and dump the URI with additional information, such as > request size and possibly response time/size. Looks very similar to : http:

Re: [tcpdump-workers] reconstruct HTTP requests in custom sniffer

2011-01-07 Thread Andrej van der Zee
Hi Cedric, > Looks very similar to : > > http://github.com/securactive/junkie > > Is the intention of junkie to follow TCP streams and reassemble complete HTTP requests/responses from the packets? How far is this implemented? > if you can live with the AGPL, maybe we could join forces ? > At f