The Perl Toolchain Summit needs more sponsors. If your company depends on Perl, please support this very important event.

Changes for version 0.325 - 2015-07-23

  • new tool tools/multiflow to extract UDP, TCP streams and HTTP requests as pcap. More information in verbose output of httpflow, like ttl and referer.
  • L4::TCP now propagates TTL from SYN+ACK of server within meta data of new connection to next layer
  • some fixes for handling IPv6 and invalid IPv4
  • httpflow no works with newer Net::Pcap which don't export :functions

Modules

library for inspection of data on various network layers
base class for connections
provides debugging facilities for Net::Inspect library
base interface for Net::Inspect::* flows
get packets from PCAP
get raw IP packets, reassemble fragments
get IP data, extracts TCP connections
get IP data,i extract UDP packets and optionally maintain UDP connections.
tries to find and redirect to appropriate protocol handler
handles empty connections
handles empty connections
handles the connections nobody else deals with
guesses and handles HTTP traffic
chained inspection and modification of HTTP request and response
simple HTTP request handling
implements WebSocket-upgrade

Provides

in lib/Net/Inspect/Flow.pm
in lib/Net/Inspect/L5/Socks.pm
in lib/Net/Inspect/L5/Socks.pm
in lib/Net/Inspect/L7/HTTP/Request/InspectChain.pm
in lib/Net/Inspect/L7/HTTP/WebSocket.pm
in lib/Net/Inspect/L7/HTTP.pm
in tools/httpflow/privFileCache.pm
in tools/httpflow/privFileCache.pm
in tools/httpflow/privHTTPConn.pm
in tools/httpflow/privHTTPRequest.pm