Commit d421615d authored by aleajactaest's avatar aleajactaest
Browse files

update README

parent 4474fed1
......@@ -8,16 +8,38 @@ Convert pcap (capture network) on yaml file to see communication between server
## Usage
### Launch network capture
### Install library
```
# Si python3 est par defaut
pip install pypcapfile
sudo tcpdump -i [networkd card] -w [Pcap output]
# Sinon
pip3 install pypcapfile
```
ex.: sudo tcpdump -i eth0 -w capture-2020-11-28-17-37-57.pcap
### Launch network capture
Commande:
```
sudo tcpdump -i [networkd card] -w [Pcap output]
```
Exemple:
```
sudo tcpdump -i eth0 -w capture-2020-11-28-17-37-57.pcap
```
### Extract information
Commande:
```
python3 spykhanat.py -m [localization msg.xml] --yaml [Yaml Output file] -w [localisation database.xml] -p [Pcap input] --filter-host-service='[Ip address: Port server khaganat]' --csv='[file output CSV {comma separator} - extract only normal message]'
```
Ex.: python3 spykhanat.py -m ~/khanat/khanat-opennel-code/code/ryzom/common/data_common/msg.xml --yaml capture-2020-11-28-17-37-57.yml -w ~/khanat/khanat-opennel-code/code/ryzom/common/data_common/database.xml -p capture-2020-11-28-17-37-57.pcap --filter-host-service='127.0.0.1:47851' --csv capture-2020-11-28-17-37-57.csv
Exemple:
```
python3 spykhanat.py -m ~/khanat/khanat-opennel-code/code/ryzom/common/data_common/msg.xml --yaml capture-2020-11-28-17-37-57.yml -w ~/khanat/khanat-opennel-code/code/ryzom/common/data_common/database.xml -p capture-2020-11-28-17-37-57.pcap --filter-host-service='127.0.0.1:47851' --csv capture-2020-11-28-17-37-57.csv
```
### Analyze result
......@@ -39,5 +61,5 @@ Detail message format (ex.: <0:31> (Sint32) CurrentSendNumber => 42 : 0000000000
* Format data (Signed/Unsigned Integer, String, Number of bit)
* Function (type of value, function in khaganat)
* Value : value in integer
* Value in binary
* Value in est par defaut binary
* Value convert for khaganat (sometimes is keyword)
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment