View unanswered posts | View active topics It is currently Mon Jun 17, 2019 8:51 pm



Post new topic Reply to topic  [ 7 posts ] 
 Files with Results in Xplico 
Author Message

Joined: Wed Sep 29, 2010 4:46 am
Posts: 5
Reply with quote
Post Files with Results in Xplico
Dear Sir,

Can someone one please let me know where exactly I can find results in a file format, l don't want the results in the html page but rather in a file that I can parse later on.

Best,

MAK


Thu Sep 30, 2010 12:41 am
Profile

Joined: Wed Sep 16, 2009 10:45 pm
Posts: 128
Reply with quote
Post Re: Files with Results in Xplico
Hello,

check http://wiki.xplico.org/doku.php?id=tips_tricks
section
"Getting a list of files created from decoding traffic"

Carlos.


Thu Sep 30, 2010 6:41 am
Profile

Joined: Wed Sep 29, 2010 4:46 am
Posts: 5
Reply with quote
Post Re: Files with Results in Xplico
Hi Carlos, I ran 20GB file on the command line using ./xplico -m pcap -f xyz.pcap and now I am trying to find the results it created in the xdecode folder but it is empty. Can you please guide me how I can get the results the explico created.

Thanks
MAK


Wed Oct 06, 2010 1:28 am
Profile

Joined: Wed Sep 29, 2010 4:46 am
Posts: 5
Reply with quote
Post Re: Files with Results in Xplico
Hi,

I can see the files created in te opt/xplico/xdecode folder , based on ip addresses there are text files . Is there any way to get those results in the sumarized manner as is done by the webinterface.

Thanks
MAK


Wed Oct 06, 2010 1:42 am
Profile
Site Admin

Joined: Wed Sep 16, 2009 10:09 pm
Posts: 394
Reply with quote
Post Re: Files with Results in Xplico
Hi Mak,
if what you want is a list of files decoded then the solution is this:
From /opt/xplico/cfg/xplico_cli.cfg change
Code:
DISPATCH=disp_cli.so LOG=FEWITDS

to
Code:
DISPATCH=disp_cli_list.so LOG=FEWITDS

if you want something other then describe it in detail, because the only solution is to customize a dispatcher.

Ciao.
Gianluca


Wed Oct 06, 2010 5:47 am
Profile WWW

Joined: Wed Sep 29, 2010 4:46 am
Posts: 5
Reply with quote
Post Re: Files with Results in Xplico
Thanks, For example if I want to look at a list of all the urls that dns has resolved how can I see that in a list, are all the source and destination IP address that have been found Is there a place I can find them in a file format. All this information is aviable on the html report but I want that in a text file .

thanks
MAK


Wed Oct 13, 2010 6:06 pm
Profile
Site Admin

Joined: Wed Sep 16, 2009 10:09 pm
Posts: 394
Reply with quote
Post Re: Files with Results in Xplico
If you use Xplico in CLI mode in the xdecode dir you can find the list of all IP/name resolved by DNS.
Code:
cat xdecode/*/dns/*


Ciao.
Gianluca


Fri Oct 15, 2010 5:39 am
Profile WWW
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Designed by Vjacheslav Trushkin for Free Forums/DivisionCore.