From: mkcon@... (Martin Kahlert) Date: 2004-08-27T17:05:35+09:00 Subject: Re: How to parse network traffic from tcpdump in ruby? Hi Gavin, In article <22184.129.94.6.30.1093590179.squirrel@webmail.imagineis.com>, "Gavin Sinclair" writes: > If you give a sample of the input and a description of the desired output, > I'm sure someone will have an answer very quickly. For the input side: Run a tcpdump -i eth0 -w traffic -s 0 on your box while doing some internet surfing. For the output side i would like to see something like this: Package sent at [timestamp] from [IP-address:port] to [IP-address:port]: HTTP/1.1 ..... Hope that helps Martin.