Net::Analysis - Modules for analysing network traffic River stage one • 1 direct dependent • 1 total dependent

I wanted a batch version of Ethereal in Perl, so I could: * sift through parsed protocols with structured filters * write custom reports that mixed events from multiple protocols So here it is. Net::Analysis is a stack of protocol handlers that emit,...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::Time - value object for [tv_sec, tv_usec] times River stage one • 1 direct dependent • 1 total dependent

Can't believe I've found myself implementing a date/time module. The shame of it. This is a heavily overloaded object, so '+', '-' do what you expect. There is some format stuff to change how it stringfies, and some stuff for rounding off values, use...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::Packet - wrapper for our own view of a packet. River stage one • 1 direct dependent • 1 total dependent

Internal module for abstracting the underlying packet representation. It is just an array, not an object; there is no OO magic at all. You can use the following constants to exctract these fields from the array: PKT_SLOT_TO - ip:port (e.g. "192.0.0.2...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::EventLoop - generate a stream of packets River stage one • 1 direct dependent • 1 total dependent

This module provides the glue between the main dispatcher/listener stuff, and the underlying source of packets. It gets packets (currently via the NetPacket layer on top of Net::Pcap), turns them into Net::Analysis::Packets, and then dispatches them ...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::Constants - some families of constants River stage one • 1 direct dependent • 1 total dependent

Some useful constants. EXPORT None by default....

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::TCPSession - represent a TCP session (with two endpoints) River stage one • 1 direct dependent • 1 total dependent

Processes a packet in the context of an existing TCP session. This is the module that does the bulk of the stream management; SYNs, ACKs, dropping duplicates and storing out-of-sequence packets. A packet, once placed in order, is considered to do jus...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::Dispatcher - handle the event stuff for the proto analysers River stage one • 1 direct dependent • 1 total dependent

This class is used to register listener objects. Whenever any of the objects emit an event, the dispatcher is used to make sure other interested listeners receive the event....

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::TCPMonologue - simple class to contain a TCP monologue River stage one • 1 direct dependent • 1 total dependent

A TCP monologue is a series of packets that travel in one direction, e.g. a HTTP response. A monologue ends when a data packet travels in the other direction. Pairs of monologues will often be linked as transactions. As packets are added, this object...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::Listener::TCP - listens to packets, emits streams River stage one • 1 direct dependent • 1 total dependent

Each raw packet is slotted into the relevant TCP session. The TCPSession module does most of the analysis on the packet, allowing this one to emit "tcp_monologue" events as they are completed. The tcp_monologue event is the backbone of higher level p...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::Listener::HTTP - an HTTP listener River stage one • 1 direct dependent • 1 total dependent

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::Listener::Base - base class for event listeners River stage one • 1 direct dependent • 1 total dependent

This module is a virtual base class for Listeners. To create a new listener, just subclass this, and add methods. If you want to listen to an event, create a method with the name of that event - the dispatcher takes care of the rest. If you want to s...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::Listener::Example1 - emit/receive custom events River stage one • 1 direct dependent • 1 total dependent

This example shows how to emit your own custom events, and also how to listen to them. This particular example has "example_bandwidth_measurement_event" in the same Listener.pm file, but you could easily put it in another Listener.pm if you wanted - ...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::Listener::Example3 - looking at HTTP transactions River stage one • 1 direct dependent • 1 total dependent

How to sit on top of Net::Analysis::Listener::HTTP. Note that you need to load the HTTP listener as well as Example3 in the Perl command line ! If you don't do this, then only the TCP listener will be loaded, no "http_transaction" events will be emit...

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::Listener::Example2 - accessing TCP info River stage one • 1 direct dependent • 1 total dependent

This Listener prints a brief summary of the monologue traffic, and optionally greps the monologue data for a regex, if one is passed via config into $self....

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::SecurityCenter::API::Analysis - Perl interface to Tenable.sc (SecurityCenter) Analysis REST API River stage zero No dependents

This module provides Perl scripts easy way to interface the Analysis REST API of Tenable.sc (SecurityCenter). For more information about the Tenable.sc (SecurityCenter) REST API follow the online documentation: <https://docs.tenable.com/sccv/api/inde...

GDT/Net-SecurityCenter-0.310 - 02 Mar 2021 18:34:54 UTC

Net::Analysis::Listener::PortCounter - broad overview of traffic River stage one • 1 direct dependent • 1 total dependent

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::Listener::HTTPPipelining - another HTTP listener River stage one • 1 direct dependent • 1 total dependent

WORRALL/Net-Analysis-0.41 - 10 Apr 2010 13:12:58 UTC

Net::Analysis::Listener::HTTPClientPerf - analysis of client performance River stage zero No dependents

We listen to the "http_transaction" events, and build up a data structure designed for a graphical report. Each time we see "tcp_sesssion_start", we start up a new session box. In this box, we build a packet histogram over time, as "tcp_packet" event...

WORRALL/Net-Analysis-Listener-HTTPClientPerf-0.01 - 02 Oct 2005 19:06:28 UTC

Net::IMP - Inspection and Modification Protocol River stage one • 1 direct dependent • 1 total dependent

IMP is a protocol for inspection, modification and rejection of data between two sides (client and server) using an analyzer implementing this interface. Basics IMP is an asynchronous protocol, usually used together with callbacks. * Using the "data"...

SULLR/Net-IMP-0.635 - 26 Feb 2021 12:45:44 UTC

Net::P0f - Perl wrapper for the P0f utility River stage zero No dependents

This module (and its associated helper modules) is a Perl interface to the P0f utility. P0f is a passive operating system fingerprinting: it identifies the operating system of network devices by *passively* looking at specific patterns in their TCP/I...

SAPER/Net-P0f-0.02 - 03 Apr 2005 10:40:55 UTC
45 results (0.051 seconds)