pcap-reconst implements tcp resequencing and http flow extraction. This project is a fork of the original pcap-reconst project with numerous corrections and improvements.

Download

Source is hosted on github:

github.com/cjneasbi/pcap-reconst

Requirements

• Java 6 or greater
• commons-lang 3.1
• commons-logging 1.1.1
• HttpComponents-HttpCore 4.2.1
• jpcap

jpcap is a wrapper for libpcap or winpcap and requires compilation before use.

Usage

See the HttpReconstructorExample class in the pcap.reconst.example package for usage.

Todo

• Test with chunked transfer encoding.