urlsnarf(8) [debian man page]

URLSNARF(8)						      System Manager's Manual						       URLSNARF(8)

NAME

       urlsnarf - sniff HTTP requests in Common Log Format

SYNOPSIS

       urlsnarf [-n] [-i interface | -p pcapfile]  [[-v] pattern [expression]]

DESCRIPTION

       urlsnarf outputs all requested URLs sniffed from HTTP traffic in CLF (Common Log Format, used by almost all web servers), suitable for off-
       line post-processing with your favorite web log analysis tool (analog, wwwstat, etc.).

OPTIONS

       -n     Do not resolve IP addresses to hostnames.

       -i interface
	      Specify the interface to listen on.

       -p pcapfile
	      Process packets from the specified PCAP capture file instead of the network.

       -v     "Versus" mode. Invert the sense of matching, to select non-matching URLs.  Specify the interface to listen on.

       pattern
	      Specify regular expression for URL matching.

       expression
	      Specify a tcpdump(8) filter expression to select traffic to sniff.

SEE ALSO

       dsniff(8)

AUTHOR

       Dug Song <dugsong@monkey.org>

																       URLSNARF(8)

PPPOE-SNIFF(8)						      System Manager's Manual						    PPPOE-SNIFF(8)

NAME

       pppoe-sniff - examine network for non-standard PPPoE frames

SYNOPSIS

       pppoe-sniff [options]

DESCRIPTION

       pppoe-sniff listens for likely-looking PPPoE PADR and session frames and deduces extra options required for pppoe(8) to work.

       Some  DSL providers seem to use non-standard frame types for PPPoE frames, and/or require a certain value in the Service-Name field.  It is
       often easier to sniff those values from a machine which can successfully connect rather than try to pry them out of the DSL provider.

       To use pppoe-sniff, you need two computers, a DSL modem and an Ethernet hub (not an Ethernet switch.)

       If the DSL modem normally connects directly to your computer's Ethernet card, connect it to the "uplink" port on the  Ethernet  hub.   Plug
       two  computers into normal ports on the hub.  On one computer, run whatever software the DSL provider gave you on whatever operating system
       the DSL provider supports.  On the other computer, run Linux and log in as root.

       On the Linux machine, put the Ethernet interface into promiscuous mode and start pppoe-sniff.  If the ethernet interface is eth0, for exam-
       ple, type these commands:

	    ifconfig eth0 promisc
	    pppoe-sniff -I eth0

       On  the	other  machine, start your DSL connection as usual.  After a short time, pppoe-sniff should print recommendations for the value of
       PPPOE_EXTRA.  Set this value in /etc/ppp/pppoe.conf.  If pppoe-sniff indicates that something special is required in PPPOE_EXTRA, please e-
       mail this to pppoe@roaringpenguin.com along with the name of your ISP and the manufacturer and model number of your DSL modem.  This infor-
       mation will be collated and provided on the PPPoE web page for users who do not have two computers.

       After pppoe-sniff finishes (or you stop it if it seems hung), remember to turn off promiscuous mode:

	    ifconfig eth0 -promisc

OPTIONS

       -I interface
	      The -I option specifies the Ethernet interface to use.  Under Linux, it is typically eth0 or eth1.  The interface should be "up" and
	      in promiscuous mode before you start pppoe-sniff.

       -V     The -V option causes pppoe-sniff to print its version number and exit.

BUGS

       pppoe-sniff only works on Linux.

AUTHORS

       pppoe-sniff was written by David F. Skoll <dfs@roaringpenguin.com>.

       The pppoe home page is http://www.roaringpenguin.com/pppoe/.

SEE ALSO

       pppd(8), pppoe(8), pppoe-sniff(8), pppoe-relay(8), /usr/share/doc/pppoe/README.Debian.gz

4th Berkeley Distribution					    3 July 2000 						    PPPOE-SNIFF(8)