blackbox - Summary

This group is not part of the GNU Project.

Blackbox is a perl script designed to continuosly collect network traffic from an interface, with specific filter conditions. Traffic is stored in a number of files in tcpdump format.
Files are automatically deleted when too old and each file is labeled with start and end time of capture.
Collected traffic can be subsequently analyzed using other tools, like tcpdump, tcptrace, ethereal, snort, chaosreader and the like.
Blackbox is designed to passively record traffic like a surveillance system, automatically overwriting old data, and useful to do effective post-event analysis. Blackbox can be an extremely useful tool in many cases.
Blackbox can run on any unix box in which tcpdump or snoop are available (minor changes will be needed for snoop use on sun boxes). It can also be used on Windows box, alog with winpcap and windump.

Registration Date: Sat 18 Sep 2004 09:50:27 PM UTC
License: GNU General Public License v2 or later
Development Status: 4 - Beta