Xplico is a tool that resolves IP traffic data from the pcap file, resolves each mailbox (POP, IMAP, and SMTP protocol), and all HTTP content, as the product may need to be used, has been studied. The Linux version used in the product is CentOS, which was thought to be simple, but the reality is more complicated than imagined.
The first option, see if you can find the RPM package, this is the simplest, but from the official website is not found, officially only Deb package. So one idea is to install the Deb package under CentOS, and the online idea is as follows:
[[EMAIL PROTECTED] TMP] #tar zxvf alien_8.88.tar.gz[[email protected] alien]# Perl makefile.pl[[email protected] alien] #make [[Email protected] alien] #make Instal[[email protected] alien] #yum -y install rpm-build[[email protected] downloads]# alien -r libbz2-dev_1.0.6-5_i386.deb libbz2-dev-1.0.6-6.i386.rpm generated[[email protected] downloads]# rpm -ivh libbz2-dev-1.0.6-6.i386.rpm
But no validation succeeds, fewer packets.
The second solution is source code compilation.
Download the xplico1.1.0, execute make
Error, probably less ndpi several header files, looked under the prompt to find the need to refer to another project ndpi.
But this situation also encountered a more troublesome thing, NDPI official version is 1.7. After the download, the reference found a few header files, ndis_structs.h. It feels like it's wrong.
But Ndpi's open source site has been ported to GitHub, with a minimum version of 1.6 on GitHub and no such file, so look for versions before 1.6. This has been looking for a long time. Http://sourceforge.net/projects/ntop/files/nDPI/old/found a 1.4 version of the
After you find it, download it and compile it. This problem is solved by introducing a new issue. Is the lack of sqlite3.h
Found the Sqlite3 source code on the Internet, copy the compiler can find the place. Another error was found
/usr/bin/ld:cannot find-llibsqlite.so
The package is missing. Then install
Yum Install Libsqlite-devel
Then compile the Perl library with less, and then download
Yum Install Perl-extutils-cbuilder Perl-extutils-makemaker
After the installation is basically compiled through.
It was not easy to compile through, but run. Xplico, tips The following information, do not know how to use, Web site 9876 port is not open, do not know what the reason?
Xplico v1.1.0
Internet Traffic Decoder (NFAT).
See http://www.xplico.org for more information.
Copyright 2007-2013 Gianluca Costa & Andrea de Franceschi and contributors.
This was free software; See the source for copying conditions. There is NO
Warranty Not even to merchantability or FITNESS for A particular PURPOSE.
This product includes GeoLite data created by MaxMind and available from http://www.maxmind.com/.
Limits changed
Configuration file (config/xplico_cli.cfg) found!
The Lande of the buck. Reprint please retain the author and source.
Note: Find a good website to download the address of the RPM package http://www.rpmfind.net/linux/rpm2html/basically commonly used packages can be found in the inside,
This article is from the "http://zhulinu.blog.51cto.com/539189/1686270" blog, please make sure to keep this source.
xplico1.1 CentOS compiling problem and its solving method