Miroirs/slackbuilds_ponce
1
0
Fork 0
mirror of https://github.com/Ponce/slackbuilds synced 2024-11-26 22:06:35 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
slackbuilds_ponce/network/ngrep
History
Robby Workman 143991a46e Entire Repo: Remove APPROVED field from .info files 
This field used to make sense in our pre-git days, but
the Signed-Off-By: line serves the same purpose (and
even more) now, so APPROVED has been rejected.  ;-)

Signed-off-by: Robby Workman <rworkman@slackbuilds.org>
2012-08-14 23:22:50 -05:00
..
ngrep-1.45-reasm.diff
ngrep.info Entire Repo: Remove APPROVED field from .info files 2012-08-14 23:22:50 -05:00
ngrep.SlackBuild
README
slack-desc Fix files with no newline at the end. 2012-05-21 20:01:58 -04:00

README 

ngrep strives to provide most of GNU grep's common features, applying
them to the network layer. ngrep is a pcap-aware tool that will allow
you to specify extended regular or hexadecimal expressions to match
against data payloads of packets. It currently recognizes IPv4/6, TCP,
UDP, ICMPv4/6, IGMP and Raw across Ethernet, PPP, SLIP, FDDI, Token
Ring and null interfaces, and understands BPF filter logic in the same
fashion as more common packet sniffing tools, such as tcpdump and snoop.

ngrep is built with IPV6 support by default; to disable it, do this:
	NGREP_IPV6=no ./ngrep.SlackBuild

A patch is included for IPV4 and IPV6 packet reassembly applied by default.
The patch adds the -r switch to ngrep.  To disable the patch, do this:
	ASSEM_PATCH=no ./ngrep.SlackBuild