Net::Analysis - Modules for analysing network traffic River stage one • 1 direct dependent • 1 total dependent

I wanted a batch version of Ethereal in Perl, so I could: * sift through parsed protocols with structured filters * write custom reports that mixed events from multiple protocols So here it is. Net::Analysis is a stack of protocol handlers that emit,...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::Time - value object for [tv_sec, tv_usec] times River stage one • 1 direct dependent • 1 total dependent

Can't believe I've found myself implementing a date/time module. The shame of it. This is a heavily overloaded object, so '+', '-' do what you expect. There is some format stuff to change how it stringfies, and some stuff for rounding off values, use...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::Packet - wrapper for our own view of a packet. River stage one • 1 direct dependent • 1 total dependent

Internal module for abstracting the underlying packet representation. It is just an array, not an object; there is no OO magic at all. You can use the following constants to exctract these fields from the array: PKT_SLOT_TO - ip:port (e.g. "192.0.0.2...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::EventLoop - generate a stream of packets River stage one • 1 direct dependent • 1 total dependent

This module provides the glue between the main dispatcher/listener stuff, and the underlying source of packets. It gets packets (currently via the NetPacket layer on top of Net::Pcap), turns them into Net::Analysis::Packets, and then dispatches them ...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::Constants - some families of constants River stage one • 1 direct dependent • 1 total dependent

Some useful constants. EXPORT None by default....

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::TCPSession - represent a TCP session (with two endpoints) River stage one • 1 direct dependent • 1 total dependent

Processes a packet in the context of an existing TCP session. This is the module that does the bulk of the stream management; SYNs, ACKs, dropping duplicates and storing out-of-sequence packets. A packet, once placed in order, is considered to do jus...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::Dispatcher - handle the event stuff for the proto analysers River stage one • 1 direct dependent • 1 total dependent

This class is used to register listener objects. Whenever any of the objects emit an event, the dispatcher is used to make sure other interested listeners receive the event....

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::TCPMonologue - simple class to contain a TCP monologue River stage one • 1 direct dependent • 1 total dependent

A TCP monologue is a series of packets that travel in one direction, e.g. a HTTP response. A monologue ends when a data packet travels in the other direction. Pairs of monologues will often be linked as transactions. As packets are added, this object...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::Listener::TCP - listens to packets, emits streams River stage one • 1 direct dependent • 1 total dependent

Each raw packet is slotted into the relevant TCP session. The TCPSession module does most of the analysis on the packet, allowing this one to emit "tcp_monologue" events as they are completed. The tcp_monologue event is the backbone of higher level p...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::Listener::HTTP - an HTTP listener River stage one • 1 direct dependent • 1 total dependent

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::Listener::Base - base class for event listeners River stage one • 1 direct dependent • 1 total dependent

This module is a virtual base class for Listeners. To create a new listener, just subclass this, and add methods. If you want to listen to an event, create a method with the name of that event - the dispatcher takes care of the rest. If you want to s...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::Listener::Example1 - emit/receive custom events River stage one • 1 direct dependent • 1 total dependent

This example shows how to emit your own custom events, and also how to listen to them. This particular example has "example_bandwidth_measurement_event" in the same Listener.pm file, but you could easily put it in another Listener.pm if you wanted - ...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::Listener::Example3 - looking at HTTP transactions River stage one • 1 direct dependent • 1 total dependent

How to sit on top of Net::Analysis::Listener::HTTP. Note that you need to load the HTTP listener as well as Example3 in the Perl command line ! If you don't do this, then only the TCP listener will be loaded, no "http_transaction" events will be emit...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::Listener::Example2 - accessing TCP info River stage one • 1 direct dependent • 1 total dependent

This Listener prints a brief summary of the monologue traffic, and optionally greps the monologue data for a regex, if one is passed via config into $self....

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::Listener::PortCounter - broad overview of traffic River stage one • 1 direct dependent • 1 total dependent

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

Net::Analysis::Listener::HTTPPipelining - another HTTP listener River stage one • 1 direct dependent • 1 total dependent

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 GMT

16 results (0.03 seconds)