Logo
http-sniffer

http-sniffer

#Network & Cloud#Network Security

A set of Bro/Zeek scripts that detect ATT&CK-based adversarial activity and raise notices

Visit Website

A Multi-Threading Tool for Sniffing HTTP Header Records

This is a multi-threading tool designed to sniff HTTP header records in addition to TCP flow statistics. It supports both offline analysis of PCAP files and live sniffing through network interface cards (NIC).

TCP Flow Statistics Exporter

This tool exports statistics for TCP flows and HTTP request/response pairs, and it supports output in JSON format. The dependencies required for this tool include libpcap for extracting traffic packets, json-c for parsing JSON data, and scons for building the project. To get started, run 'scons' in the root folder to compile the project. After that, specify the live interface using 'ifconfig' in the terminal (for example, en0), or you can choose to store the output flows in JSON format. The output also includes a brief summary in CSV format.