http://securityratty.com/tag/ngrep Thu, 10 Jan 2008 09:50:00 +0000 iRatty Engine http://blogs.law.harvard.edu/tech/rss http://securityratty.com/article/23ca43a9d7f75783982ad6ad9ad47b34 http://securityratty.com/article/23ca43a9d7f75783982ad6ad9ad47b34 HeX System for the pending February toolsmith, I was extremely pleased to discover NSM-Console, from Matthew Lee Hinman. I've not yet seen such an efficient, useful, all encompassing framework for offline packet analysis. NSM-Console includes modules for:
# aimsnarf
# ngrep (gif/jpg/pdf/exe/pe/ne/elf/3pg/torrent)
# tcpxtract
# tcpflow
# chaosreader
# bro-IDS
# snort
# tcpdstat
# capinfos
# tshark
# argus
# ragator
# racount
# rahosts
# hash (md5 & sha256)
# ra
# honeysnap
# p0f
# pads
# fl0p
# iploc
Consider giving both HeX System and the included NSM-Console an immediate look.

]]> Thu, 10 Jan 2008 09:50:00 +0000 nsm-console nsm-console includes modules hex system matthew lee hinman discover nsm-console offline packet analysis february toolsmith tcpflow ngrep NSM-Console and HeX update