ndpi转换为wireshark的接口
来源:互联网 发布:sql去除重复数据 编辑:程序博客网 时间:2024/06/06 07:32
nDPI Wireshark Plugin
Introduction
nDPI can provide Wireshark protocol dissection to complement internal protocol decoding. In order to do this, the ndpiReader application is used to provide Wireshark nDPI protocol dissection, and a Wireshark plugin interprets nDPI information.
Installation
- Copy the ndpiReader application (it is located under nDPI/example) to the Extcap path. See Wireshark -> About menu for identifying the extcap directory. Under OSX it is usually /Applications/Wireshark.app/Contents/MacOS/extcap
- Copy the ndpi.lua plugin under ~/.wireshark/plugins (or in the global Wireshark plugins directory)
Usage
At Wireshark startup you will find a new extcap interface named “nDPI interface”. Select that interface and specify an interface name (for live capture) or a pcap file path (for reading packets from a pcap file). You can choose a nDPI protocol list from the dropdown menu in case you want Wireshark to dissect only protocols of the specified nDPI application protocol.
During capture the ndpiReader plugin will pass Wireshark the nDPI protocol information adding an ethernet packet trailer that contains nDPI information. The lua plugin interprets this information and it displays it in the Wireshark GUI.
nDPI Packet Filtering
As nDPI is natively integrated into Wireshark, you can filter packets using the usual filtering mechanism. Example use “ndpi.protocol.name==BitTorrent” to filter all BitTorrent traffic.
- ndpi转换为wireshark的接口
- NDPI的分析
- NDPI的分析
- nDPI源码的一点分析
- nDPI的DNS协议解析
- NDPI识别的协议号大全
- Androi的使用WireShark来调试接口
- wireshark找不到接口的处理方法
- wireshark找不到接口的处理方法
- wireshark报没有可以捕获的接口
- wireshark找不到接口的处理方法
- Win10下Wireshark找不到接口的解决办法
- wireshark找不到捕获接口问题的解决办法
- ubuntu wireshark 没有接口
- 协议的注册与维护——ndpi源码分析
- ndpi源码分析一--几个重要的结构体
- 协议的注册与维护——ndpi源码分析
- ndpi源码分析一--几个重要的结构体
- 【Scikit-Learn 中文文档】内核岭回归
- [LeetCode] [C] 100. Same Tree
- 【CodeForces
- 在C# 中 textbox 文本的转换
- 栈的压入、弹出序列
- ndpi转换为wireshark的接口
- Ionic常用指令事件
- 神经网络能否代替决策树算法?
- 设计模式之禅11
- linux server运行图形化程序Xvfb
- 区域生长和matlab实现
- Ionic环境搭建
- c语言基础02
- hibernate框架的查询方式QBC(二十)