Strict Standards: Declaration of action_plugin_safefnrecode::register() should be compatible with DokuWiki_Action_Plugin::register($controller) in /mnt/data/www/nbee/lib/plugins/safefnrecode/action.php on line 14

Strict Standards: Declaration of action_plugin_popularity::register() should be compatible with DokuWiki_Action_Plugin::register($controller) in /mnt/data/www/nbee/lib/plugins/popularity/action.php on line 57

Warning: Cannot modify header information - headers already sent by (output started at /mnt/data/www/nbee/lib/plugins/safefnrecode/action.php:14) in /mnt/data/www/nbee/inc/auth.php on line 352

Warning: Cannot modify header information - headers already sent by (output started at /mnt/data/www/nbee/lib/plugins/safefnrecode/action.php:14) in /mnt/data/www/nbee/inc/actions.php on line 180
Download [NetBee]
 

Download

It is possible to download the source files of NetBee.

Version (Work-In-Progress), Jan 10th, 2013

Click here to download the source files of NetBee. Download this pack if you want to modify the internals of the NetBee library (for example to add some new feature), import it in your applications, or use the nbeedump or nbextractor tools.

New features

Header chain

Specifies the sequence of protocols allowed in the packets

 tcp in ip.src==10.0.0.1 in ethernet
 tcp.sport==80 in {ip.src==10.0.0.1 and ip.dst==10.0.0.2,ipv6} in vlan* in ethernet
 tcp notin ipv6 or udp
 tcp in any in mpls.label==28
 ip in ppp in gre in ip* in ipv6

Header indexing

Allows to refer to a particular instance of a protocol in the packet

 ip%2
 ip%2.src==10.0.0.1
 tcp notin ip%2
 ip%2 in ipv6 in any+ in ethernet
 gre in {ip%2.src==10.0.0.1 or ip%2.dst==10.0.0.1}

Tunneled

Requires that a protocol is involved in a tunnele

 ip tunneled
 tcp in ip tunneled
 ip.src==10.0.0.1 tunneled
 udp notin ipv6 tunneled
 ip tunneled in any notin ethernet

Preferred and Full NetPDL databases

By default, only the encapsulations marked as preferred in the NetPDL database are considered. By specifying “fullencap” in a filter, all the NetPDL database is instead considered.

 ip fullencap
 ip.src==10.0.0.1 fullencap
 tcp in ipv6 tunneled in ip%2.src==10.0.0.1 fullencap

Field extraction

Allows to extract the value of some fields within the packet that satisfies the filtering condition

 extractfields(ip.src)
 extractfields(ip%2.src,ip%2.dst)
 extractfields(ip*.src)
 ip extractfields(tcp.sport,tcp.dport,ip.src,ip.dst)
 ppp in any in ip extractfields(vlan*.id)
 preferred extractfields(ip.tlen)

Tools

nbeedump: can be used to run filters without the keyword “extractfields”

nbextractor: it can execute filters that requires the extraction of particular fields. The extracted fields can be shown on the screen, but can also be dumped in a SQLite database for further analysis.

Older versions

Version 0.3, May 16th, 2012: Sources

Version 0.2, before May 16th, 2012

Binary (Win32) These are the binaries of NetBee, which are needed to run programs based on this library.
Developer's Pack (Win32) Download this pack if you want to create programs based on the NetBee library. This pack includes the precompiled binaries, libraries and include files that are needed for compiling a program based on NetBee. Additionally, the full set of documentation is provided.
Developer's Pack (Linux32) Download this pack if you want to create programs based on the NetBee library. This pack includes the precompiled binaries, libraries and include files that are needed for compiling a program based on NetBee. Additionally, the full set of documentation is provided.

Version 0.1, Aug 18th, 2004: Binaries - Developer's Pack

 
download.txt · Last modified: 2015/02/24 09:21 (external edit)     Back to top