From 5e133f9ad11c6c18913ddc0bb2c085be7198b693 Mon Sep 17 00:00:00 2001 From: Ying-Chieh Liao Date: Wed, 14 Aug 2002 15:53:48 +0000 Subject: add hafiye 1.0 Multi Platform Customizable TCP/IP Packet Sniffer --- security/hafiye/pkg-descr | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 security/hafiye/pkg-descr (limited to 'security/hafiye/pkg-descr') diff --git a/security/hafiye/pkg-descr b/security/hafiye/pkg-descr new file mode 100644 index 000000000000..4b80ba1576b1 --- /dev/null +++ b/security/hafiye/pkg-descr @@ -0,0 +1,18 @@ +When I looked at the source code for various famous sniffers, I've noticed +that they all had all seperate .C files for interpreting various protocols. +Why not have a sniffer that can understand user-supplied protocol details? +Here it is. + +When fired, Hafiye first visits each sub-directory under its knowledge-base +directory and opens to see whether it is a protocol knowledge-base file. If +so, It loads the necessary information from that file and places it into its +memory space. After constructing the supplied knowledge-base, Hafiye starts +looping for receiving packets. When a packet arrives, it demultiplexes the +layers according to its knowledge-base and prints protocol-based information. + +Features + - Multi Platform Support (Posix Compliant) + - Customizable Protocol Definitions (Layer II, III and IV) + - Customizable Packet Interpretation (Layer II, III and IV) + +WWW: http://www.enderunix.org/hafiye/ -- cgit v1.2.3