Chaosreader

Open source tool to fetch application data from snoop or tcpdump logs
Download

Chaosreader Ranking & Summary

Advertisement

  • Rating:
  • License:
  • GPL
  • Price:
  • FREE
  • Publisher Name:
  • Brendan Gregg
  • Publisher web site:
  • Operating Systems:
  • macOS
  • File Size:
  • 181 KB
  • Release Date:
  • 2021-06-18 14:56:57

Chaosreader Tags


Chaosreader Description

Open source tool to fetch application data from snoop or tcpdump logs Chaosreader is a free tool that will allow you to trace TCP, UDP and other types of sessions and fetch application data from snoop or tcpdump logs.Supported protocols include TCP, UDP, IPv4, IPv6, ICMP, telnet, FTP, HTTP, SMTP, IRC, X11, VNC, etc.Chaosreader is a type of "any-snarf" program, as it will fetch telnet sessions, FTP files, HTTP transfers (HTML, GIF, JPEG, etc), SMTP emails, and others from the captured data inside network traffic logs. A html index file is created that links to all the session details, including realtime replay programs for telnet, rlogin, IRC, X11 and VNC sessions; and reports such as image reports and HTTP GET/POST content reports. Chaosreader can also run in standalone mode - where it invokes snoop or tcpdump (if they are available) to create the log files and then processes them. Requirements: · Perl 5.6 or later What's New in This Release: · Chaosreader is now Perl 5.6 dependant! · SSH Analysis. Three new files are created for SSH connections: a replay file that prints symbols representing the encrypted packets and their sizes, a html version of the replay file, and a keystroke delay data file. The replay file is a perl program that plays back the session. · Command line improvements. Originally chaosreader would print packet information as it processed each and every packet. For a capture file with a few thousand packets this was too much, and has been replaced with a single status line. Getopt::Long is now used to provide alternates to the standard command line switches. eg, "-H" can now also be written as "--hex" (hooray!Speed. For large captures chaosreader is now running about 50% faster.


Chaosreader Related Software