hsns: the haskell network sniffer.
* What is Hsns?
* Installation
* Packet filters
* Options
What is Hsns?
=============
hsns is a packet sniffer for unicies written totally
in Haskell (http://www.haskell.org) Currently, hsns
has only been tested to work on Linux.
Installation
============
To install, you need to have a haskell compiler such as the
Glasgow Haskell Compiler installed, the Pcap library to be
installed, and the Network.Pcap libraries for GHC.
You may obtain Network.Pcap from http://hackage.haskell.org
To install, run the Setup.lhs script like so (you can skip
the chmod part if you have pulled hsns from the darcs
repository with the --set-scripts-executable flag):
[austin@continuum hsns]$ chmod +x ./Setup.lhs
[austin@continuum hsns]$ ./Setup.lhs configure
...
[austin@continuum hsns]$ ./Setup.lhs build
...
[austin@continuum hsns]$ su -c './Setup.lhs install'
Password:
...
[austin@continuum hsns]$
hsns is now installed.
Packet filters
==============
hsns can receive a berkeley packet filter
in it's command line (anywhere) that can
be used to filter packets in the same style
as Tcpdump. For a reference on bpf's, see the
tcpdump man page.
Options
=======
Currently, hsns accepts the following options:
-h,-? --help Display help
-c[COUNT] --count=COUNT Exit after receiving COUNT packets.
0 is receive forever, default is 5.
-D --iflist List interfaces that can be captured
on
-i INT --interface=INT Listen on interface INT.
-l --linebuffered Make output line buffered.
-p --nopromiscuous Do not go into promiscuous mode
-s LEN --snarf=LEN change snarf length from 68 (default)
to LEN.
-V --version Display version and exit.