Skip to content

Instantly share code, notes, and snippets.

@raviprakashgiri

raviprakashgiri/find_string_pcap.sh

Last active February 27, 2017 00:49
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save raviprakashgiri/7fe6b372c576c181a16b2fb0d16dc870 to your computer and use it in GitHub Desktop.
Save raviprakashgiri/7fe6b372c576c181a16b2fb0d16dc870 to your computer and use it in GitHub Desktop.
Download ZIP
find a string in a pcap
Raw
find_string_pcap.sh
#!/bin/bash
value=`cat adult.txt` # files from which string input has been taken
for i in ${value[@]}; do tshark -r test.pcap -T fields -e ip.src -e ip.dst -e data |\
grep `echo -n $i | xxd -p` |\
cut -f 1| uniq > $i; echo $i; done#
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment