On Dec 15, 2005, at 7:29 AM, Frederick Cheung wrote:
Do you know that the data is actually getting as far as the server
(use tcpdump etc...)?
This may be known to a lot of you, but another useful tool for
looking at HTTP and FTP packets is tcpflow. tcpflow is a lot like
using tcpdump with the -A (show ascii) option, but it:
* Strips off all of the TCP headers, time-stamps, etc (which if you
don't need them, are just clutter) and
* Optionally (you can turn this off with the -c option which I do
most of the time) lets you divide the output into data streams and
store those into separate "flow" files.
So, instead of using:
% sudo tcpdump -A -s 0 port 80
try:
% sudo tcpflow -c port 80
tcpflow will read packet traces collected with tcpdump, so you can
use it for looking at traces collected by others with tcpdump.
- Jim Luther
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macnetworkprog/email@hidden
