Index of /ports_security/hafiye

 Name                    Last modified      Size  
 Parent Directory                             -   
 Makefile                13-May-2006 08:15  685   
 distinfo                25-Nov-2005 21:01  185   
 pkg-descr               31-Aug-2009 12:31  917   
 pkg-plist               14-Aug-2002 19:53  212   

When I looked at the source code for various famous sniffers, I've noticed
that they all had all separate .C files for interpreting various protocols.
Why not have a sniffer that can understand user-supplied protocol details?
Here it is.

When fired, Hafiye first visits each sub-directory under its knowledge-base
directory and opens to see whether it is a protocol knowledge-base file. If
so, It loads the necessary information from that file and places it into its
memory space. After constructing the supplied knowledge-base, Hafiye starts
looping for receiving packets. When a packet arrives, it demultiplexes the
layers according to its knowledge-base and prints protocol-based information.

Features
   - Multi Platform Support (Posix Compliant)
   - Customizable Protocol Definitions (Layer II, III and IV)
   - Customizable Packet Interpretation (Layer II, III and IV)

WWW: http://www.enderunix.org/hafiye/