From: Gavin Sinclair <gsinclair@...>
Date: 2004-08-27T16:03:10+09:00
Subject: Re: How to parse network traffic from tcpdump in ruby?

> Hi!
>
> i have a bunch of network traffic to analyse. The traffic has been
> captured with something like "tcpdump -w traffic -s 0".
>
> Is there any fast method to parse the traffic file and get the packets'
> headers as well as their payload with relative small effort?
>
> Of course i would like to do that in ruby, but if there are only perlish
> ways, i will use that, too. The timeframe of the project doesn't allow
> me a lot of try and error.
>
> Any hints are very appreciated!

If you give a sample of the input and a description of the desired output,
I'm sure someone will have an answer very quickly.

Cheers,
Gavin