u20024804/httpflow

Packet capture and analysis utility similar to tcpdump for HTTP

httpflow

Installation

• Install zlib, libpcap

##  Based on SourceCode
> curl -sL http://www.zlib.net/zlib-1.2.11.tar.gz -O
> curl -sL http://www.tcpdump.org/release/libpcap-1.8.1.tar.gz -O
> tar zxvf libpcap-1.8.1.tar.gza
> tar zxvf zlib-1.2.11.tar.gz
> cd libpcap-1.8.1 && ./configure && make && make install && cd ..
> cd zlib-1.2.11 && ./configure && make && make install && cd ..

# Or 

## On CentOS
yum install libpcap-devel zlib-devel

## On Ubuntu
apt-get install libpcap-dev zlib1g-dev

## On Darwin
### do nothing

• build httpflow

> git clone https://github.com/six-ddc/httpflow
> cd httpflow &&  make && make install

or directly download Release binary file.

Usage

> httpflow -h

libpcap version 1.3.0
httpflow 0.0.1

Usage: http_dump [-i interface] [-f filter] [-s snapshot-length] [-w output-path]

• Capture default interface

> httpflow

• Capture all interfaces

> httpflow -i any

• Use the expression to filter the capture results

# If no expression is given, all packets on the net will be dumped.
# For the expression syntax, see pcap-filter(7).
> httpflow -f 'tcp port 80 and host baidu.com'