cabledolphin

Homepage: https://github.com/legoscia/cabledolphin

Author: Magnus Henoch

Updated:

Summary

Capture Emacs network traffic

Commentary

Cabledolphin captures network traffic to and from Emacs Lisp
processes, and writes it into a PCAPNG file, which can be read by
tools such as tcpdump and Wireshark.

Since Cabledolphin extracts the data on the Emacs Lisp level, it
writes the packet capture in cleartext even if the connection is
TLS-encrypted.

While it doesn't get hold of actual packet headers, it synthesises
TCP/IP headers to the minimum extent required to keep Wireshark
happy.

Available commands:

- `cabledolphin-trace-new-connections': start capturing packets for
  any new connections whose name matches a certain regexp.

- `cabledolphin-trace-existing-connection': start capturing packets
  for an existing connection.

- `cabledolphin-set-pcap-file': change the file that data is
  written to.

- `cabledolphin-stop': stop capturing, and stop matching new
  connections.

If you prefer output in "classic" PCAP format, set
`cabledolphin-output-type' to `pcap' before calling
`cabledolphin-set-pcap-file'.

Dependencies