Ethereal-users: [Ethereal-users] Dump file extraction of images and similar

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Carsten Glans" <cag@xxxxxxxxxxx>
Date: Thu, 08 Jan 2004 08:00:28 +0000
Dear list,

Have been searching the net for a tool or module that does the following

*take a set of cap files
*extract images like gif, jpg, png etc and perhaps video format like mov, avi etc from the dump file *creates a file name either by looking for the filename in the cap file stream or randomize one *write a log file to state in which cap file(s) the specific image or video was found *dump the image or video file from one or several cap files out to a image or video file of the correct format.

Is this doable, perhaps someone else already done it? Why would i like this feature? Because once a users data is captured it is in my case needed as proof for HR department when users invalidate our company policy for porn surf etc.

Yes, we use the proxy log files for most of it, but once we find unwanted behavior for some users, we might want to take a closer look using ethereal or similar program to capture the data and then process it more granular as some links visited by users are paylinks with doubtfull content.

Any and all hints are welcome, thanks for your help!



Regards

Carsten

_________________________________________________________________
The new MSN 8: advanced junk mail protection and 2 months FREE* http://join.msn.com/?page=features/junkmail