Kismet Wireless

Kismet Forums

 

Posted by:dragorn
Subject:Read Kismet pcapdump to see URL only
Date:03:57:17 25/10/2011

> > strings foo.pcap | grep http ?
>
> I am sorry, I am still going through the Kismet configuration & settings so don't know if .pcap and .pcapdump file are the same? Can we generate .pcap through Kismet?
>

Yes they are the same.

> 30783 392.089413 10.185.1.68 -> 184.28.157.55 HTTP 1127 GET /widgets/images/f.gif?button=blue&screen_name=YahooProjector&show_count=false&show_screen_name=true&lang=en&twttr_variant=1.1&twttr_referrer=http%3A%2F%2Fmovies.yahoo.com%2Fblogs%2Fthe-projector%2Ffive-shots-paranormal-activity-3-trailers-weren-t-165710359.html&twttr_li=0&twttr_widget=0&twttr_guest_id=v1%3A131322481851824296 HTTP/1.1
>
> which is readable but still not the full url. I am still reading so if you find any link useful, please let me know. I would be really thankful!

Looks like a full URL to me.


Reply to this message