tcpdump mailing list archives

Re: Email Content Extraction From payload


From: Julian Mehnle <julian () mehnle net>
Date: Fri, 3 Apr 2009 09:10:53 +0000

Shameem Ahamed wrote:

I want to get the e-mail details (Email Body, Subject, To, CC and
attachment details) from the e-mail send pcap i created using
wireshark.

Can any one help me regarding this ?.

I am doing a project to capture and present high level (layer 7) data
content(payload)  from pcap file

Try libnids:

  http://libnids.sourceforge.net

It performs TCP flow reassembly and all the neat stuff that your local TCP 
stack usually does.

I recently did something similar in Python and used the pynids Python 
binding to great effect.

-Julian

Attachment: signature.asc
Description: This is a digitally signed message part.


Current thread: