[INFO] httpry mit Freetz für die FritzBox

/var/tmp/flash/mod # ldd /usr/bin/httpry
        libpcap.so.1.0 => /usr/lib/libpcap.so.1.0 (0x2aabe000)
        libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x2aafa000)      
        libc.so.0 => /lib/libc.so.0 (0x2ab18000)              
        ld-uClibc.so.0 => /lib/ld-uClibc.so.0 (0x2aaa8000)

/var/tmp/flash/mod # httpry -h                                
httpry version 0.1.5 -- HTTP logging and information retrieval tool
Copyright (c) 2005-2009 Jason Bittel <[email protected]>      
Usage: httpry [ -dhpq ] [-b file ] [ -f format ] [ -i device ] [ -m methods ]
       [ -n count ] [ -r file ] [ -o file ] [ -u user ] [ 'expression' ]     

   -b file      write HTTP packets to a binary dump file
   -d           run as daemon                           
   -f format    specify output format string            
   -h           print this help information             
   -i device    listen on this interface                
   -m methods   specify request methods to parse        
   -n count     set number of HTTP packets to parse     
   -o file      write output to a file                  
   -p           disable promiscuous mode                
   -q           suppress non-critical output            
   -r file      read packets from input file            
   -u user      set process owner                       
   expression   specify a bpf-style capture filter      

Additional information can be found at:
   http://dumpsterventures.com/jason/httpry

/var/tmp/flash/mod # httpry -d -q -i dsl -o /var/media/ftp/uStor01/httpry.log

/var/tmp/flash/mod # tail -f /var/media/ftp/uStor01/httpry.log
# httpry version 0.1.5
# Fields: timestamp,source-ip,dest-ip,direction,method,host,request-uri,http-version,status-code,reason-phrase
2009-12-25 16:18:51     192.168.yyy.yyy   85.214.115.219  >       GET     www.ip-phone-forum.de   /clientscript/vbulletin_global.js?v=368 HTTP/1.1        -       -
2009-12-25 16:18:51     192.168.yyy.yyy   85.214.115.219  >       GET     www.ip-phone-forum.de   /images/misc_mns/navbits_finallink_ltr.gif      HTTP/1.1        -       -
2009-12-25 16:18:51     192.168.yyy.yyy   85.214.115.219  >       GET     www.ip-phone-forum.de   /images/buttons_mns/quote.gif   HTTP/1.1        -       -
2009-12-25 16:19:45     192.168.yyy.yyy   85.214.115.219  >       GET     www.ip-phone-forum.de   /clientscript/vbulletin_global.js?v=368 HTTP/1.1        -       -
2009-12-25 16:19:45     192.168.yyy.yyy   85.214.115.219  >       GET     www.ip-phone-forum.de   /clientscript/vbulletin_menu.js?v=368   HTTP/1.1        -       -

[I]sleep 30[/I]
/usr/bin/httpry -d -q -i dsl -o /var/media/ftp/uStor01/httpry.log

var/mod/root # [B]ldd /usr/bin/logrotate[/B]
        libpopt.so.0 => /usr/lib/libpopt.so.0 (0x2aabe000)
        libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x2aad8000)
        libc.so.0 => /lib/libc.so.0 (0x2aaf6000)
        ld-uClibc.so.0 => /lib/ld-uClibc.so.0 (0x2aaa8000)

/var/mod/root # [B][URL="http://schlayer.org/logrotate.html"]logrotate[/URL] --usage[/B]
Usage: logrotate [-dfv?] [-d|--debug] [-f|--force] [-m|--mail=command] [-s|--state=statefile] [-v|--verbose] [-?|--help] [--usage] [OPTION...] <configfile>

/var/mod/root # [B]logrotate --help[/B]
Usage: logrotate [OPTION...] <configfile>
  -d, --debug               Don't do anything, just test (implies -v)
  -f, --force               Force file rotation
  -m, --mail=command        Command to send mail (instead of `/sbin/mailer')
  -s, --state=statefile     Path of state file
  -v, --verbose             Display messages during rotation
Help options:
  -?, --help                Show this help message
      --usage               Display brief usage message

make popt-precompiled

httpry -q -i dsl 'host <[COLOR="Red"]IP-Adresse[/COLOR]>'

httpry -q -i dsl 'src host <IP-Adresse> && dst port 80 || dst port 443 && proto TCP'

/var/mod/root # httpry -q -i dsl 'ether src 00:17:E0:74:0A:D5 && dst port 80 || dst port 443 && proto TCP'

Error: Cannot compile capture filter 'ether src 00:17:E0:74:0A:D5 && dst port 80 || dst port 443 && proto TCP': [COLOR="Red"]ethernet addresses supported only on ethernet/FDDI/token ring/802.11/ATM LANE/Fibre Channel[/COLOR]

# packit -m cap 'tcp[tcpflags] != (tcp-ack|tcp-fin) && tcp[tcpflags] & (tcp-syn) != 0 and src host 192.168.11.180 and dst port 80 || 443 and not dst net 192.168' -i lan
Mode:  Packet Capture using device: lan [tcp[tcpflags] != (tcp-ack|tcp-fin) && tcp[tcpflags] & (tcp-syn) != 0 and src host 192.168.11.180 and dst port 80 || 443 and not dst net 192.168]

-| PID 1 |------------------------------------------------------------------

Timestamp:   20:05:05.516233
TCP header:  Src Port: 53114  Dst Port: 80  Flag(s): S
             Window: 5840  Seqn: 3472375256
IP header:   Src Address: 192.168.11.180  Dst Address: bw-in-f105.1e100.net
             TTL: 63  ID: 33101  TOS: 0x0  Len: 60  (DF)

-| PID 2 |------------------------------------------------------------------

Timestamp:   20:05:05.905250
TCP header:  Src Port: 53115  Dst Port: 80  Flag(s): S
             Window: 5840  Seqn: 3489896350
IP header:   Src Address: 192.168.11.180  Dst Address: bw-in-f105.1e100.net
             TTL: 63  ID: 10628  TOS: 0x0  Len: 60  (DF)

-| PID 3 |------------------------------------------------------------------

Timestamp:   20:05:06.925367
TCP header:  Src Port: 53116  Dst Port: 80  Flag(s): S
             Window: 5840  Seqn: 3486174301
IP header:   Src Address: 192.168.11.180  Dst Address: bw-in-f105.1e100.net
             TTL: 63  ID: 29299  TOS: 0x0  Len: 60  (DF)

-| PID 4 |------------------------------------------------------------------

Timestamp:   20:05:06.947062
TCP header:  Src Port: 59762  Dst Port: 80  Flag(s): S
             Window: 5840  Seqn: 3493193099
IP header:   Src Address: 192.168.11.180  Dst Address: fx-in-f101.1e100.net
             TTL: 63  ID: 23496  TOS: 0x0  Len: 60  (DF)
.................................