When I looked at the source code for various famous sniffers, I've noticed
that they all had all separate .C files for interpreting various protocols.
Why not have a sniffer that can understand user-supplied protocol details?
Here it is.
When fired, Hafiye first visits each sub-directory under its knowledge-base
directory and opens to see whether it is a protocol knowledge-base file. If
so, It loads the necessary information from that file and places it into its
memory space. After constructing the supplied knowledge-base, Hafiye starts
looping for receiving packets. When a packet arrives, it demultiplexes the
layers according to its knowledge-base and prints protocol-based information.
Features
- Multi Platform Support (Posix Compliant)
- Customizable Protocol Definitions (Layer II, III and IV)
- Customizable Packet Interpretation (Layer II, III and IV)
WWW: http://www.enderunix.org/hafiye/
Remove unmaintained expired ports from security
2011-05-01 security/aafid2: Upstream disapear and distfile is no more available
2011-05-01 security/bjorb: Upstream disapear and distfile is no more available
2011-05-01 security/borzoi: Upstream disapear and distfile is no more available
2011-05-01 security/cmd5checkpw: Upstream disapear and distfile is no more
available
2011-05-01 security/cops: Upstream disapear and distfile is no more available
2011-05-01 security/find_ddos: Upstream disapear and distfile is no more
available
2011-05-01 security/ftpmap: Upstream disapear and distfile is no more available
2011-05-01 security/hafiye: Upstream disapear and distfile is no more available
2011-05-01 security/ident2: Upstream disapear and distfile is no more available
2011-05-01 security/liedentd: Upstream disapear and distfile is no more
available
2011-05-01 security/pam_pop3: Upstream disapear and distfile is no more
available
2011-05-01 security/poc: Upstream disapear and distfile is no more available
2011-05-01 security/portscanner: Upstream disapear and distfile is no more
available
2011-05-01 security/ppgen: Upstream disapear and distfile is no more available
2011-05-01 security/qident: Upstream disapear and distfile is no more available
2011-05-01 security/quintuple-agent: Upstream disapear and distfile is no more
available
2011-05-01 security/rc5pipe: Upstream disapear and distfile is no more available
2011-05-01 security/rid: Upstream disapear and distfile is no more available
2011-05-01 security/ssh: Upstream disapear and distfile is no more available
2011-05-01 security/tea-total: Upstream disapear and distfile is no more
available
2011-05-01 security/uberkey: Upstream disapear and distfile is no more available