tcpdump mailing list archives

Re: Email Content Extraction From payload


From: Julian Mehnle <julian () mehnle net>
Date: Fri, 3 Apr 2009 13:38:24 +0000

Shameem Ahamed wrote:

Yes, i am getting the payload. But the only thing is the payload is in
binary format.

I have no idea what that means.  What protocol are you trying to analyze?  
HTTP?  SMTP?  If it's either of those, then there's nothing particularly
"binary" about them, unless HTTP compression is going on.

I am trying to capture the webmail traffic, Like Yahoo!,  AOL Mail etc.

That's a very helpful piece of information!  Still, I don't see what's
"binary" about HTTP traffic from/to http://mail.yahoo.com and 
http://webmail.aol.com.  Are they playing dirty tricks and not just using 
plain HTTP?

And that payload consists of all the http methods ,  protocol specific
data and user data(e-mail content). I want the payload stripped and get
only the user data(e-mail details).  Is there any other library, which
helps to do this?

I don't think there are libraries that can extract individual e-mails from 
captured HTTP traffic from/to any webmail services.

-Julian

Attachment: signature.asc
Description: This is a digitally signed message part.


Current thread: