More weird ideas from Scott

[Carter Bullard]

Hey Scott,
   Do you just want to print it, as raxml does?
I'm somewhat resistant to putting this in ra(), as the
formatting gets really weird.  Is there a problem with
using raxml()?  You can attach raxml() to the server
and have it print its output live.  I do this kind of thing:

   raxml -S localhost | fgrep SrcData

all the time.  I also use ragrep() in the same way:

   ragrep -S localhost -e "cgi" -w - | raxml | fgrep Ascii

this does the trick for me.

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter at qosient.com
Phone +1 212 813-9426
Fax   +1 212 813-9426


> -----Original Message-----
> From: Scott A. McIntyre [mailto:scott at xs4all.nl]
> Sent: Tuesday, January 30, 2001 2:11 AM
> To: Carter Bullard
> Subject: More weird ideas from Scott
> 
> 
> 
> 
> Oh no, more email from Scott.
> 
> Hi Carter,
> 
> How impractical/annoying, would it be to have ra() have a -U flag that
> will dump user data live?
> 
> Currently, the only way I've found to get at the user payload of
> packets is to run through raxml -- but it would be handy if during an
> "event" I could have a ra -S fubar -U -n - tcp and port 80 
> and host wibble
> 
> To track CGI's for example...
> 
> Just an idea.
> 
> Scott
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3699 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20010130/0f9ed1de/attachment.bin>