tag:blogger.com,1999:blog-4088979.post3287692034516631306..comments2023-10-16T06:06:25.012-04:00Comments on TaoSecurity Blog: Traffic Talk 5 PostedRichard Bejtlichhttp://www.blogger.com/profile/13512184196416665417noreply@blogger.comBlogger4125tag:blogger.com,1999:blog-4088979.post-54741235775247147112009-04-28T00:39:00.000-04:002009-04-28T00:39:00.000-04:00Rich,
Is there any way to read the article withou...Rich,<br /><br />Is there any way to read the article without creating a TechTarget membership?Joehttps://www.blogger.com/profile/14998755598722686389noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-16692166344755688702009-04-27T09:15:00.000-04:002009-04-27T09:15:00.000-04:00Careful with httpry - it doesn't perform the neces...Careful with httpry - it doesn't perform the necessary TCP stream reassembly needed to get HTTP header fields that aren't in the first segment of a request/response.<br /><br />For example, if an HTTP request spans two segments and the Host: header is in the second one, httpry won't be able to parse it out.<br /><br />Tshark can be used for this kind of thing:<br /><br />tshark -r yourfile.pcap -R http.request -T fields -e http.host -e http.request.uri<br /><br />...which will do all the reassembly you need.Alec Watershttps://www.blogger.com/profile/06944972100071856767noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-30704514788965204362009-04-26T14:13:00.000-04:002009-04-26T14:13:00.000-04:00Doh! Fixed, thanks.Doh! Fixed, thanks.Richard Bejtlichhttps://www.blogger.com/profile/13512184196416665417noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-3860387070116167842009-04-26T14:09:00.000-04:002009-04-26T14:09:00.000-04:00Richard the link you have published is wrong and i...Richard the link you have published is wrong and it point to the 4th traffic talk articleAnonymousnoreply@blogger.com