The immediate PCAP library hacking is done. First product,
a packet capture combined with some daily analysis,
producing rather unpretty graphs of random packet-bys. I
just realised that the stats need fleshing out somewhat (so
I get a breakdown of TCP SYNs, UDP packets and ICMP echo;
the current breakdown doesn't, quite, give that data).
Anyway, what's there at the moment is here and at some point in
the hopefully near future, the pcap code will be available.
I've recently (as in "this morning") started coding on
noctool again, currently working
on the configuration
interface. Some success, some not-success, though that may
clear itself up in the future.
For interested readers, a brief explanation of my code
wrangling. I code in the time left over between "feed the
cats" and "get dressed" in the morning. I have about 90
minutes from when the alarm clock starts going off until I
need to start leaving home. This is so I have a bit of a
time buffer for those mornings when it's hard to get up.
Out of those 90 minutes, I usually end up having about 50
left available for assorted sitting in front of the
computer. That time is divcided between "poke the
computer", "poke code" and "randomly click around in a
browser". Most of the code I've posted about and/or
published over the last 2-3 years has been done in that
approximate time window (on a daily basis). The only thing
I can think of that was done significantly out of that was
the code to
read cflowd data files and that was because it started
out as a work project.