Explore packet capture, analysis, and injection techniques using Go in this GopherCon 2016 talk by John Leon. Dive into the world of packet capturing, learning its applications and motivations. Discover common tools and prerequisites, including WinPcap. Get an overview of the gopacket library and its capabilities. Learn to find network devices, open live devices, create packet sources, and read packets with and without filters. Understand how to work with pcap files for writing and analyze various packet layers, including Ethernet, IP, and TCP. Explore faster decoding methods and custom layer creation. Gain insights into creating packets, working with flows and endpoints, and see practical demonstrations of these concepts in action.
Packet Capture, Analysis, and Injection with Go
Overview
Syllabus
Packet Capturing with Go
What is Packet Capturing
How Can it be Used?
My Motivations
Common Tools
Prerequisites
WinPcap
gopacket Overview
Get pcap Version
Find Network Device
Network Adapter Struct
Address Struct
Opening Live Device
Creating a Packet Source
Read One Packet
Read All Packets
Capturing with Filter
Berkeley Packet Filter Examples
Opening pcap file for Writing
Writing Pcap File
List Packet Layers
Visualizing Packet Layers
Ethernet Packet Structure
IP Packet Structure
Analyze IPv4 Layer
Analyze TCP Layer
Decoding Packet Layers
Faster Decoding (1/2)
Other Supported Layers
Common Packet Layers
Custom Layers (4/5)
Creating Packets
Flow and Endpoint
Demos
Taught by
Gopher Academy
