Simson L. Garfinkel

icon indicating a website link https://simson.net/ icon indicating an email [email protected]

icon company BasisTech, LLC icon location Somerville, MA icon location I'm an author, programmer, former associate professor, and a part-time US Government employee. That photo is more than 30 years old. ORCID 0000-0003-1294-283

Results 853 comments of Simson L. Garfinkel

Windows -T %T issue

Yes, you can specify your own template. How would you like this template to work on Windows machines? On Tue, Nov 15, 2016 at 12:47 PM, Brian Maloney [email protected] wrote:...

Output in JSON

The alert file descriptor sends a line of text for every file that is opened and closed to a file descriptor of your choice. The file `alerts.txt` is part of...

Add support for nanosecond precision in timestamp file *.findx

Sounds like a good addition. If you could provide a patch and a sample of a nanosecond file, we can add the support! > On May 13, 2017, at 3:55...

Unnecessary chunked HTTP header & footer remains in the output flow

Thanks for the bug report. This is very useful information, and your providing of a pcap file is really helpful. Would you like to submit a patch? On Sep 1,...

Unnecessary chunked HTTP header & footer remains in the output flow

So it is. Would you like to submit a patch?

Feature request: Direct UID/GID use for -U

Great idea. Can you submit a pull request with the modification?

Add command line option -Z --relinquish-privileges as for tcpdump

Sadly, we cannot change an existing command line option, we can only create new ones. The application already has code to drop SUID; we will add the code to change...

can it extract unidirectional flows?

Sure ---- Sent from my phone. On Dec 28, 2017, at 12:36 AM, Juranshine wrote: This command line 'tcpflow -r file.pcap -o outdir' works for bidirectional flow? can it extract...

can it extract unidirectional flows?

Just use an appropriate tcpdump filter. ---- Sent from my phone. On Dec 28, 2017, at 1:18 AM, Juranshine wrote: aaaaa,So can u tell me what the commond line is.......

incorrectly reassembling tcp stream

Please send to [email protected] --- Sent from my phone. Please Call me at 202-322-8411 if you wish a longer response. > On Feb 6, 2014, at 10:40 AM, ibeex [email protected]...