snoop is Solaris to inspect network packets.
I was surprised to see submitted form fields (i.e. password)
transmitted not in clear text but as 'HTTP (body)'. That being
the case, I'm wondering why encryption is so important, not that
I doubt it. Guess I'll need to pick up Network Security for Dummies.
----- Original Message -----
From: "zentara" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, December 24, 2003 8:13 AM
Subject: Re: Snooping a POST
> On Tue, 23 Dec 2003 14:44:11 -0500, [EMAIL PROTECTED] (Jonathan
> Mangin) wrote:
>
> >Hey everybody...
> >
> >I'm thinking about encrypting parts of my site (in some fashion),
> >and began with snoop -d elxl0. I expected to see form data in
> >clear text, but didn't. I need to do some serious research, but
> >what's the quick story? If I can't see it, who can, and how?
>
> Are you using https? Try ethereal, it shows it. I'm not familiar
> with snoop or 'elxl0'. What's that? Windows?
>
> ngrep works well too
> "ngrep -d eth0 > capture.log" #capture ethernet
> "ngrep -d lo >capture.log # capture localhost
>
> If you are just out to capture the form data, you could
> a cgi-testing script.
>
> #!/usr/bin/perl
> use warnings;
> # arg_echo.cgi - print all form values
> use strict;
> use CGI qw/:standard/;
> $|=1;
> print "Content-type: text/plain\n\n";
>
> foreach my $name ( param() ) {
> print "$name: '", param($name), "'\n";
> }
> __END__
>
>
>
> --
> When life conspires against you, and no longer floats your boat,
> Don't waste your time with crying, just get on your back and float.
>
> --
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> <http://learn.perl.org/> <http://learn.perl.org/first-response>
>
>
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
<http://learn.perl.org/> <http://learn.perl.org/first-response>
