httpflow 数据包捕获和分析实用程序类似于tcpdump for HTTP

httpflow 数据包捕获和分析实用程序类似于tcpdump for HTTP

httpflow

Installation

MacOs

brew updatebrew install httpflow

Linux

Install zlib, pcap, pcre

## On CentOSyum updateyum install libpcap-devel zlib-devel pcre-devel## On Ubuntu / Debianapt-get updateapt-get install libpcap-dev zlib1g-dev libpcre3 libpcre3-dev

Building httpflow

> git clone https://github.com/six-ddc/httpflow> cd httpflow && make && make install

or directly download Release binary file.

Usage

libpcap version libpcap version 1.9.1httpflow version 0.0.9Usage: httpflow [-i interface | -r pcap-file] [-u url-filter] [-w output-path] [expression] -i interface Listen on interface, This is same as tcpdump 'interface' -r pcap-file Read packets from file (which was created by tcpdump with the -w option) Standard input is used if file is '-' -u url-filter Matches which urls will be dumped -w output-path Write the http request and response to a specific directory expression Selects which packets will be dumped, The format is the same as tcpdump's 'expression' argument If filter expression is given, only packets for which expression is 'true' will be dumped For the expression syntax, see pcap-filter(7) For more information, see https://github.com/six-ddc/httpflow

Capture default interface

> httpflow

Capture all interfaces

> httpflow -i any

Use the expression to filter the capture results

# If no expression is given, all packets on the net will be dumped.# For the expression syntax, see pcap-filter(7).> httpflow host host httpbin.org or host baidu.com

Use the regexp to filter request urls

> httpflow -u '/user/[0-9]+'

Read packets from pcap-file

# tcpdump -w a.cap> httpflow -r a.cap

Read packets from input

> tcpdump -w - | httpflow -r -

Write the HTTP request and response to directory /tmp/http

> httpflow -w /tmp/http

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。