Rob Coops wrote:
Ah, I see...
I think you have been misled by the name of the Net::Pcap lib, the lib is meant to produce the file you are trying to poke around in. I would do the follwoing.

    * Use Net::SSH or similair to connect to the remote machine.
    * On the remote machine use grep or similair to pull out the lines
      you are intrested in and store those in an array/file or well
      what ever storage you like on your side.
    * Process the data on your own machine.

The advantage of this is that you only move the data you are intrested in over the network and not the whole big file, thus reducing the network trafic and maning your network admins happy as well. Because you have the data on your side you can then do with it what you want without having to rely on any software on the remote machine. I hope this helps a bit, Rob On Thu, Jul 31, 2008 at 9:06 AM, Richard Lee <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote:

    Rob Coops wrote:

        If you can make Net::Pcap connect to a remote server things
        will work fine, I am not sure about using Net::Pcap to do this
        as I never used it and from the description it seems to be a
        packet capture lib not so much a communication one, but as I
        said if you can make it reach out and talk to the other side
        you should be fine.
         I think you will end up using somehting like Net::SSH or
        something like that as these are more aimed at communication
        then Net::Pcap seems to be.
         But in the end as long as the other side is listening on a
        port and you can produce the required packets to get
        communication going you should be fine, there is no need to
        have perl, or any perl libs on the other side all that is
        needed is an open port that you can communicate with.
        The thing that is listening on that port is what determins
        what you can do, read email, open and interact with files or
        just browse a web page, perl on your machine cannot change
        which process is listening on the other machine.
         In short I guess you can if the other machine is listening,
        but you might want to use a more suitable lib for it.
         Regards,
         Rob

        On Thu, Jul 31, 2008 at 8:41 AM, Richard Lee
        <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
        <mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>> wrote:

           say I have big wireshark file based on remote server.

           I want to logon to that server and using Net::Pcap to poke the
           file and only grep out small portion of information which
        meets my
           criteria.
           Remote server won't have Net::Pcap installed.

           I wanted to write this program w/ Expect modules and Net::Pcap
           module in my mind.
           But since these things are only located in my local server,
        will
           this work on remote server?

           --    To unsubscribe, e-mail:
        [EMAIL PROTECTED]
        <mailto:[EMAIL PROTECTED]>
           <mailto:[EMAIL PROTECTED]
        <mailto:[EMAIL PROTECTED]>>

           For additional commands, e-mail: [EMAIL PROTECTED]
        <mailto:[EMAIL PROTECTED]>
           <mailto:[EMAIL PROTECTED]
        <mailto:[EMAIL PROTECTED]>>
           http://learn.perl.org/




    Hi,

    local server(w/ Perl installed) -------------------> remote
    server(with Pcap file I am interested in poking around)

    if I launch a perl script from my local server(using say Net::SSH)
    and logs onto remote server, my perl can poke around that file on
    remote server
    using Net::Pcap.... ? So essentially in order to do this, I need
    to use 2 modules(to logon, and then parsing out the pcap file)

    I am thinking about writing this but just not sure if it will work
    on remote server


but I am interested in grepping out the pcap file so I cannot simply just do grep

--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
http://learn.perl.org/


Reply via email to