Kismet Wireless

Kismet Forums

 

Posted by:sumitk1
Subject:Read Kismet pcapdump to see URL only
Date:06:29:17 28/10/2011

> > > strings foo.pcap | grep http ?
> >
> > I am sorry, I am still going through the Kismet configuration & settings so don't know if .pcap and .pcapdump file are the same? Can we generate .pcap through Kismet?
> >
>
> Yes they are the same.
>
> > 30783 392.089413 10.185.1.68 -> 184.28.157.55 HTTP 1127 GET /widgets/images/f.gif?button=blue&screen_name=YahooProjector&show_count=false&show_screen_name=true&lang=en&twttr_variant=1.1&twttr_referrer=http%3A%2F%2Fmovies.yahoo.com%2Fblogs%2Fthe-projector%2Ffive-shots-paranormal-activity-3-trailers-weren-t-165710359.html&twttr_li=0&twttr_widget=0&twttr_guest_id=v1%3A131322481851824296 HTTP/1.1
> >
> > which is readable but still not the full url. I am still reading so if you find any link useful, please let me know. I would be really thankful!
>
> Looks like a full URL to me.

Yes you are right. I was assuming that I would get a full URL like www.google.com/search?query...

Thanks!


Reply to this message