jaemap.blogg.se

GoPacket provides a nice mechanism to interface with libpcap, the underlying library powering tcpdump.

Reassemble TCP streams (a Wireshark feature).Collect packets from network interfaces (replace TCPDump).In this post, we’ll focus on using GoPacket to: You can perform all sorts of analysis on packets using the awesome Go programming language.īut it’s a little more complicated than a couple of lines of code, so I’ll walk you through what you’ll need to do. Now I’ll show how to automate package processing with GoPacket, a general purpose packet processing library. Using GoPacket for General Purpose Packet Processing But it’s not easy to programmatically run the analysis, let alone package up custom analyses to ship off to your users. This setup is great for one-off debugging sessions. You can then load the output in Wireshark, which provides a nice GUI to perform all sorts of analysis on the packets. Tcpdump makes it possible to inspect network traffic by letting you print the contents of packets on a network interface that match a given filter.