README.md

#sniffer 

sniffer capture http packet in gopacket(libpcap).

The sniffer project captures packets through pcap and parses the http protocol. 
The fetched results will be stored in the database. 
He also provides a webserver interface to view packet capture results.

# install libpcap
for ubuntu/debian:

	sudo aptitude install libcap-dev

for centos/redhat/fedora:

	sudo yum install libpcap-devel


#depend

```
go get github.com/asmcos/requests 
```

# make
```
make
```

# run

```
nohup ./sniffer -i eth0 &
```


#Support Config Json file

sniffer.json

```
{
  "name": "sniffer",
  "device": "en0",
  "port":80
}
```


# Save data to webserver

The sniffer can store data to a remote server or not save the data.
You can submit data through serverurl.

How to config serverurl?

``` 
vim sniffer.json
"serverurl":"http://127.0.0.1:1337/", //Save data to server
"serverurl":"" //Don't save data
```

How to build data server ?

```
See https://github.com/asmcos/AIDatas

```


# capture example:
```
192.168.10.110->175.27.0.201:54893->80

extshort.weixin.qq.com
POST /mmtls/1d70cf00 HTTP/1.1 
Connection :[close]
Content-Length :[542]
Content-Type :[application/octet-stream]
Upgrade :[mmtls]
User-Agent :[MicroMessenger Client]
Accept :[*/*]
Cache-Control :[no-cache]

175.27.0.201->192.168.10.110:80->54893

HTTP/1.1 200 OK
Content-Type :[application/octet-stream]
Content-Length :[229]

```

# View results through webserver
```
http://zhanluejia.net.cn:8080/httpdata/
```
![image](http://www.zhanluejia.net.cn/static/uploads/8f74446537e233fb2af932355cd927f0.png)
![image](http://www.zhanluejia.net.cn/static/uploads/f5ef64bf4874bd2103945975a1db5d4a.png)



# Use AIDatas and sniffer for linkage
https://note.youdao.com/s/BdhDLrwb