[Devil-linux-develop] [enhancement] tshark

[Oliver N. <dig...@gm...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi!

I played around within my network and found out that it could be useful to have a tool
for decoding the various traffic/protocols flooding around.

There is a nice configure option in wireshark to tell the script to build only the
console version (tshark).

As far as i tested, it works nice within DL-1.3.4 and if more people like that idea i
could provide the scripts for DL integration.

What do you think about tshark support in DL?


sample output:

> Linux Devil 2.6.24.4 #1 SMP Tue Apr 15 21:38:40 Local time zone must be set--see zic  i686 prescott i386 GNU/Linux
> root@Devil:~ # tshark -i br0
> Capturing on br0
>   0.000000 192.168.10.1 -> 192.168.10.255 CUPS ipp://192.168.10.1:631/printers/kyocera (idle)
>   0.000086  192.168.2.1 -> 192.168.2.255 CUPS ipp://192.168.2.1:631/printers/kyocera (idle)
>   0.782132 192.168.10.216 -> 192.168.10.242 TCP rockwell-csp3 > 33773 [PSH, ACK] Seq=1 Ack=1 Win=191 [TCP CHECKSUM INCORRECT] Len=144 TSV=837300 TSER=1612136


Regards,

Oliver



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org

iD8DBQFIBcnE724ZL5LNhNcRAjKHAJoDp6hoT2RKnIUyW5+CqK/ALadc9wCeNNEj
4rr82L0Y37rKmzyifoi779g=
=a3rZ
-----END PGP SIGNATURE-----