国外的一款sniffer 工具...未测试..有兴趣的自己研究下吧...嘿嘿..下面贴上说明..
Carnivore, a network sniffer tool.
This binary is compiled from sources provided by,
CarnivorePE - distributed version 0.01
Compiled by Donnie Werner


What is this?

At present "CarnivorePE" is a sniffer that realy is
only being used in "net-art". I won't go into what
Carnivore is ( hint: use Google )

What the heck am I doing?

Bringing this network tool to the security
and art community, to try to build a "Carninet" or
other Carnivoric works to light.

info and home of CarnivorePE:

R.S.G at http://rhizome.org/carnivore/


my info and comments:

there are "viewers" for the data the Carnivore
host(s) provides.
one that visualizes data in IP format is
"synapsis" at http://www.marumushi.com/apps/synapsis

"stats" is also a nice, info client

"fuel" is another one, more "arty"

these are the best of the clients i could find,
it does appear that you can read data from other
hosts, making a "Carninet" seems like a cool idea.
furthermore the protocol is very close to IRC...
( modify the settings and it will connect to a IRCd )


here is a perl test script for Carnivore.

---------- snip ----------

use Socket;
$port = 6667;
$host = 'localhost';  #or replace with the IP address of your CarnivorePE machine
$chan = '#minivore'; #or replace with the channel of your choice
# avail channels are minivore, hexivore, and carnivore

#CONNECT TO CARNIVORE PE
socket (IRC, PF_INET, SOCK_STREAM, getprotobyname('tcp')) || die "Socket error: $!\n";
connect(IRC, sockaddr_in($port,inet_aton($host))) || die "Connect error: $!\n";

#JOIN A CHANNEL
$buffer = "JOIN $chan\n";
syswrite IRC, $buffer, length($buffer);

for(;;){             #START LOOPING
    $packet = ; #GET A PACKET
    print $packet;   #NOW, MAKE SOME ART ;-)
}

close(IRC);

---------- snip ----------

Download ( 685 downloads)

Click to download: carnivore.zip