Filtering Packets

hershey101 · 06-19-2008, 03:44 PM

Hi,
I am new at UNIX and programing in general and only have a basic knowledge of C++. I am helping out with some research at a college and was given the task to sort through captured packets via IP addresses. I was wondering if anyone could help me with writing a code which filters through pcap files by ip addresses and then records the timestamps. I know a few programs that do this type of thing such as WireShark but they take up too much memory when analyzing gigabytes of data and that is why I am looking to write a relatively simple code which just gets my task done and gathers data for me.

**LoneWolf071** · 06-20-2008, 09:43 AM

IPTables. It's a little tricky and tough to learn, but it's low over head, you can use it to mark packets according to certain criteria

06-19-2008, 03:44 PM	#1 (permalink)
hershey101 Registered User Join Date: Jun 2008 Posts: 4 OS: xp, vista, ubuntu, linux	Filtering Packets Hi, I am new at UNIX and programing in general and only have a basic knowledge of C++. I am helping out with some research at a college and was given the task to sort through captured packets via IP addresses. I was wondering if anyone could help me with writing a code which filters through pcap files by ip addresses and then records the timestamps. I know a few programs that do this type of thing such as WireShark but they take up too much memory when analyzing gigabytes of data and that is why I am looking to write a relatively simple code which just gets my task done and gathers data for me.

06-20-2008, 09:43 AM	#2 (permalink)
LoneWolf071 Be Free Join Date: Nov 2004 Location: Texas Posts: 840 OS: Windows XP, Linux	Re: Filtering Packets IPTables. It's a little tricky and tough to learn, but it's low over head, you can use it to mark packets according to certain criteria __________________ Suicide Command in Linux : rm -rf / ;) AIM:TheLoneWolf071@aim.com--If You Need Help, Don't Hesitate...