EnderUNIX Hafiye 1.0 review

Hafiye is a POSIX-compliant, customizable TCP/IP packet sniffer

License: GPL (GNU General Public License) File size: 8K Developer: Murat Balaban

0

Hafiye is a POSIX-compliant, customizable TCP/IP packet sniffer. When I looked at the source code for various famous sniffers, I've noticed that they all had all seperate .C files for interpreting various protocols. Why not have a sniffer that can understand user-supplied protocol details? Here it is.

When fired, Hafiye first visits each sub-directory under its knowledge-base directory and opens to see whether it is a protocol knowledge-base file. If so, It loads the necessary information from that file and places it into its memory space.
After constructing the supplied knowledge-base, Hafiye starts looping for receiving packets. When a packet arrives, it demultiplexes the layers according to its knowledge-base and prints protocol information.


Here are some key features of "EnderUNIXHafiye":
Multi Platform Support (Posix Compliant)
Customizable Protocol Definitions (Layer II, III and IV)
Customizable Packet Interpretation (Layer II, III and IV)