Xplico · Kali Linux Tools Documents

# Xplico軟件包描述 Xplico的目標是獲取網絡流量中的應用信息數據。例如，從pcap文件中，Xplico可以提取每個電子郵件（POP、IMAP和SMTP協議）、HTTP、VoIP呼叫（SIP、MGCP、H323）、FTP、TFTP等內容。 Xplico不是網絡協議分析器。 [Xplico首頁](http://www.xplico.org/)| [Kali Xplico資源](http://git.kali.org/gitweb/?p=packages/xplico.git;a=summary) - 作者：Gianluca Costa，Andre de Franceschi - 許可證：GPLv2 ## Xplico包含的工具 ### xplico - 網絡取證分析工具（NFAT） ``` root@kali:~# xplico -h xplico v1.0.1 Internet Traffic Decoder (NFAT). See http://www.xplico.org for more information. Copyright 2007-2012 Gianluca Costa & Andrea de Franceschi and contributors. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. This product includes GeoLite data created by MaxMind, available from http://www.maxmind.com/. usage: xplico [-v] [-c <config_file>] [-h] [-g] [-l] [-i <prot>] -m <capute_module> -v 版本信息 -c 配置文件 -h 幫助信息 -i 協議信息 -g 顯示協議的圖形樹 -l 在屏幕中打印所有日志 -m 捕獲類型模塊注意：參數必須遵守這個順序！ ``` ## xplico用法示例使用rltm模塊（-m rltm）分析接口eth0（-i eth0）上的流量： ``` root@kali:~# xplico -m rltm -i eth0 xplico v1.0.1 Internet Traffic Decoder (NFAT). See http://www.xplico.org for more information. Copyright 2007-2012 Gianluca Costa & Andrea de Franceschi and contributors. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. This product includes GeoLite data created by MaxMind, available from http://www.maxmind.com/. Configuration file (/opt/xplico/cfg/xplico_cli.cfg) found! GeoLiteCity.dat found! pcapf: running: 0/0, subflow:0/0, tot pkt:1 pol: running: 0/0, subflow:0/0, tot pkt:0 eth: running: 0/0, subflow:0/0, tot pkt:1 pppoe: running: 0/0, subflow:0/0, tot pkt:0 ppp: running: 0/0, subflow:0/0, tot pkt:0 ip: running: 0/0, subflow:0/0, tot pkt:0 ``` 原文鏈接：[http://tools.kali.org/information-gathering/xplico](http://tools.kali.org/information-gathering/xplico)