Hafiye is a POSIX-compliant, customizable TCP/IP packet sniffer. When I looked at the source code for various famous sniffers, I've noticed that they all had all seperate .C files for interpreting various protocols. Why not have a sniffer that can understand user-supplied protocol details? Here it is.
When fired, Hafiye first visits each sub-directory under its knowledge-base directory and opens to see whether it is a protocol knowledge-base file. If so, It loads the necessary information from that file and places it into its memory space.
After constructing the supplied knowledge-base, Hafiye starts looping for receiving packets. When a packet arrives, it demultiplexes the layers according to its knowledge-base and prints protocol information.
Product's homepage
Here are some key features of "EnderUNIX Hafiye":
· Multi Platform Support (Posix Compliant)
· Customizable Protocol Definitions (Layer II, III and IV)
· Customizable Packet Interpretation (Layer II, III and IV)
Find us on Google+
