URLSNARF(8)
π URLSNARF β the manual page, but make it cute
okay bestie, listen. this is URLSNARF, section 8 of the System Manager's Manual, and it is literally the moment. π¦
β¨ NAME β¨
urlsnarf β sniff HTTP requests in Common Log Format. that's it, that's the girl. she sniffs. she logs. she serves. π
πΈ SYNOPSIS πΈ
urlsnarf [-n] [-i interface | -p pcapfile] [[-v] pattern [expression]]
look at her. so compact. so iconic. π
π DESCRIPTION π
so what urlsnarf actually does is: she outputs all requested URLs sniffed from HTTP traffic in CLF β that's Common Log Format, the format used by almost all web servers, no cap. π«Ά
and why do we care? because CLF is suitable for offline post-processing with your favorite web log analysis tool. the manpage name-drops analog, wwwstat, etc. β so like, take your pick, bestie, she plays nice with all of them. π
it's giving "I capture the vibes and hand them off to whoever wants to analyze them." main character energy, fr fr. π
β¨ OPTIONS β¨
-nβ do not resolve IP addresses to hostnames. she keeps the IPs raw, unbothered, un-resolved. π-iinterface β specify the interface to listen on. tell her where to listen, she's not a mind reader. π-ppcapfile β process packets from the specified PCAP capture file instead of the network. so instead of live-sniffing, she reads the file. offline era. π-vβ "Versus" mode. this inverts the sense of matching, so she selects the non-matching URLs instead. and yes, the original manpage also says "Specify the interface to listen on." right there in this entry β that line is genuinely in there, so here it is, preserved forever, we do not touch the artifacts. πΊ (iykyk)- pattern β specify regular expression for URL matching. regex girlies rise. π§
- expression β specify a
tcpdump(8)filter expression to select traffic to sniff. you hand her a filter, she sniffs what you asked for. periodt. β
π SEE ALSO π
π AUTHOR π
Dug Song <dugsong@monkey.org> β the originator, the blueprint, the whole entire legend. π
and that's the page, bestie!! this was URLSNARF(8) from the System Manager's Manual β go forth, sniff responsibly, and remember: every requested URL deserves to be logged in CLF. slay. πβ¨π¦π₯
π¦ where this page comes from
- arch rolling: dsniff 2.4b1-34 Β· BSD
- debian bookworm: dsniff 2.4b1+debian-31 Β· BSD-3-Clause
- debian trixie: dsniff 2.4b1+debian-34 Β· BSD-3-Clause
- epel 9: dsniff 2.4-0.37.b1.el9 Β· BSD
- fedora 43: dsniff 2.4-0.47.b1.fc43 Β· BSD-3-Clause AND BSD-4-Clause-UC AND ISC AND LicenseRef-Fedora-Public-Domain AND MIT
- fedora 44: dsniff 2.4-0.48.b1.fc44 Β· BSD-3-Clause AND BSD-4-Clause-UC AND ISC AND LicenseRef-Fedora-Public-Domain AND MIT
- nixos 26.05: dsniff 2.4b1
- nixpkgs unstable: dsniff 2.4b1
- ubuntu jammy: dsniff 2.4b1+debian-30build1 Β· BSD-3-Clause
- ubuntu noble: dsniff 2.4b1+debian-32build2 Β· BSD-3-Clause
- ubuntu questing: dsniff 2.4b1+debian-35
- ubuntu resolute: dsniff 2.5a2-1 Β· BSD-3-Clause
- ubuntu stonking: dsniff 2.5a2-1build1 Β· BSD-3-Clause
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms