The Perl Toolchain Summit needs more sponsors. If your company depends on Perl, please support this very important event.

Changes for version 0.326 - 2016-07-06

  • initial support for SMTP
    • implemented in L7::SMTP
    • tool to extract mails from SMTP traffic: tools/smtp2mbox.pl
    • no support for BDAT yet (will croak)
  • L4::HTTP
    • if request object implements fix_reqhdr/fix_rsphdr method these get used in case of invalid request/response headers to fix the headers
    • downgrade unexpected status code 1xx to warning instead of error
  • L4::TCP
    • don't call upper flow with empty packets (unless FIN)
    • merge data into next buffer and retry if no data could be processed by upper flow
  • escape special characters in debug function

Modules

library for inspection of data on various network layers
base class for connections
provides debugging facilities for Net::Inspect library
base interface for Net::Inspect::* flows
get packets from PCAP
get raw IP packets, reassemble fragments
get IP data, extracts TCP connections
get IP data,i extract UDP packets and optionally maintain UDP connections.
tries to find and redirect to appropriate protocol handler
handles empty connections
handles empty connections
handles the connections nobody else deals with
guesses and handles HTTP traffic
chained inspection and modification of HTTP request and response
simple HTTP request handling
implements WebSocket-upgrade
guesses and handles SMTP traffic

Provides

in lib/Net/Inspect/Flow.pm
in lib/Net/Inspect/L5/Socks.pm
in lib/Net/Inspect/L5/Socks.pm
in lib/Net/Inspect/L7/HTTP/Request/InspectChain.pm
in lib/Net/Inspect/L7/HTTP/WebSocket.pm
in lib/Net/Inspect/L7/HTTP.pm
in tools/httpflow/privFileCache.pm
in tools/httpflow/privFileCache.pm
in tools/httpflow/privHTTPConn.pm
in tools/httpflow/privHTTPRequest.pm