justniffer

Justniffer is a TCP packet sniffer. It can log network traffic in a 'standard' (web server-like) or in a customized way. It can also log response times, useful for tracking network services performances (e.g. web server, application server, etc.). The output format of the traffic can be easily customized. An example written in Python (delivered with the official package) stores the transferred contents in an output directory separated by domains. This means that the transferred files like html, css, javascript, images, sounds, etc. can be saved to a directory.

Overview

justniffer was born to help in troubleshooting performance in network TCP-based services: HTTP, RTSP, SIP, SMTP, IMAP, POP, LDAP, Telnet etc.

It can collect low and high level protocol and performance information, reconstructing the TCP flow in a reliable way using portions of the Linux kernel code. It uses a slightly modified version of the libnids libraries that already include a modified version of Linux kernel code in a more reusable way. It can be extended with external scripts (bash, Python, or any executable) and generate logs in a customizable way

The man page for justniffer explains all the options.

External links

• Official website
• Justniffer - tcp packet sniffer
• Lars Michelsen

Examples

• Examples

Grab http traffic and observe

• Grab Http traffic

See also

• Comparison of packet analyzers
• tcpdump, a packet analyzer
• pcap, an application programming interface (API) for capturing network traffic
• snoop, a command line packet analyzer included with Solaris
• wireshark, a network packet analyzer
• dsniff, a packet sniffer and set of traffic analysis tools
• netsniff-ng, a free Linux networking toolkit
• ngrep, a tool that can match regular expressions within the network packet payloads
• etherape, a network mapping tool that relies on sniffing traffic
• tcptrace, a tool for analyzing the logs produced by tcpdump
• Microsoft Network Monitor, a packet analyzer