Wireshark-dev: [Wireshark-dev] Live HTTP Header Inspection - 2nd attempt
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Sheahan, John" <John.Sheahan@xxxxxxxxxxxxx>
Date: Fri, 19 Sep 2008 10:47:27 -0400
Hi guys....no one answered my last post regarding this topic so I'm posting it again.
 
I am new to the list and have used the Wireshark gui alot in the past. I am in need of writing a script to look at some live http headers and was thinking that if I were to use the command line version of wireshark running on a linux server, that I would somehow be able to write some either Perl or Ruby code to look at packets live and make some logical decisions based on the contents of the headers.
 
I am trying to get some advice if I can use the wireshark program itself from a linux server to parse the headers with a script or do I need to use tcpdump somehow ?
 
Can anyone please point me in the right direction?
 
thanks
 
John