Re: Snooping on PPP modem connection.

Article View: comp.protocols.ppp

Article #409

Back to comp.protocols.ppp Previous Next

#409

From: Ian Stirling
Date: Sun, 12 Apr 1998 00:00

34 lines
2629 bytes

Tom Bird <hamster@nospam.demon.co.uk> wrote:
: Ian Stirling <0000352FECBD.NO_UCE@mauve.demon.co.uk> wrote in article
: <0000352FECBD.NO_UCE@mauve.demon.co.uk>...
:> Anyone know how to take raw bytestreams, and produce a tcpdump-like
:> dump of the packets going over a PPP connection? Preferably without
:> having to write a PPP stack.
:> I'm trying to reverse engineer the protocols used to talk to an online
:> service, so I can make a linux client.
:> It's currently running on windows.

: The easy way to do this would be to download the telnet specification
: RFC's.

I know how to do telnet, ... that's not the problem, I'm trying to 
work out when/where some out of band data is being sent.

: I was writing a client similar to this but I knocked it on the head a while
: ago.

: The telnet stuff for port 23 (the default for unspecified) on Linux is a
: different protocol.  Things like mail (25 / 110) and news (119) are just 7
: bit ASCII.

I wrote a news-server once.
About 50 lines of awk IIRC, with integrated slurper.
Not that bad performance, though it was only tested with a couple 
of readers.
Annoyingly, I don't have access to the code any more.

-- 
Ian Stirling.   Designing a linux PDA, see  http://www.mauve.demon.co.uk/
----- ******* If replying by email, check notices in header ******* -----
What a wonderfull world it is that has girls in it!     Robert A Heinlein.

Technical Details

Message-ID: <00003530BE5B.NO_UCE@mauve.demon.co.uk>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References: <0000352FECBD.NO_UCE@mauve.demon.co.uk> <01bd65aa$f485d860$0100b51f@dbqa.demon.co.uk>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fac57,99252ca71c35871a
X-Google-Attributes: gidfac57,public
X-Google-Thread: 103eaf,99252ca71c35871a
X-Google-Attributes: gid103eaf,public
From: Ian Stirling <00003530BE5B.NO_UCE@mauve.demon.co.uk>
Subject: Re: Snooping on PPP modem connection.
Date: 1998/04/12
Message-ID: <00003530BE5B.NO_UCE@mauve.demon.co.uk>
X-Deja-AN: 343308335
References: <0000352FECBD.NO_UCE@mauve.demon.co.uk> <01bd65aa$f485d860$0100b51f@dbqa.demon.co.uk>
X-Mail2News-User: Send.NO_UCE@mauve.demon.co.uk
X-Warning0: For unsolicited commercial email, sent or causing to be sent to my email address
X-Warning1: on this message, I reserve the right to levy a charge for my time and expenses
X-Warning2: of up to 100 pounds sterling per message, plus legal, penalty or other costs.
X-Complaints-To: abuse@demon.net
X-Mail2News-Path: post-31.mail.demon.net!mauve.demon.co.uk
X-Trace: mail2news.demon.co.uk 892386943 8365 Send.NO_UCE mauve.demon.co.uk
Organization: None.
X-Note: Anti-UCE in effect, replying should work if you are not UCE'ng
User-Agent: tin/pre-1.4-971106 (UNIX) (Linux/2.0.33 (i586))
Newsgroups: comp.protocols.ppp,demon.tech.unix

Reply to Parent Message