OK so let's install term shock the first thing I'm gonna do is install a W get.
This is gonna allow me to download an application from GitHub I could use it but I'm simply going to
use w get what I'm gonna do now is use w get and connect it to get up and download term shock.
I'll put the links below this video.
This is essentially a getup page and I'm downloading term shock from GitHub.
So here's the Github page for term shock or terminal UI for t shock and we can see a little bit of information
about the application.
You can also do a clone or download some simply downloading this file from GitHub.
So Alice shows me that I've got the file downloaded.
The next thing I'm going to do is unknown zip.
Or until that file.
So until the file there it is.
I'm going to move to that directory and I see term shock.
So what I'm going to do is install term shock to use a local then and then I'm going to go back to my
home directory so back in my home directory of root I'll clear the screen.
Notice I've got this file which I previously created by capturing traffic of the network.
So what I can do now is type term shock read t shock P kept file something to read my pickup file and
what you can see through a terminal window now is the traffic that's being captured so as an example
I could filter for SPF and apply my filter notice I see my 0 SPF messages so as an example this is the
source mac address of the broader
show interface gigabit 00.
Notice MAC address of router IP address of router.
That's what we see over here.
Destination is 2 2 4 0 0 5 which is the multicast address 4 0 SPF.
There's the layer to MAC address open up the IP header can use my up and down arrow keys use enter to
open this up.
Notice DCP is set to CSX.
Very important traffic.
Scrolling down I can see that the protocol is 89 which is 0 SPF so at least 4 notice we have a wispy
F..
Press enter they press Enter here a version of SPF is version 2.
This is a hollow packet.
Source IP address is this as we saw over here.
IP address of router area is the backbone area so I can see all the traffic that I would normally see
through a graphical user interface directly through a terminal notice once again if I could order.
Here I am in a terminal.
There's no graphical user interface here.
It's a simple terminal but term shock allows me to read why shock captures through a terminal window
or filter for EAI GOP.
Notice there's II GOP messages I can go up and down through my messages.
Use the up and down arrows if I like I can press tab to jump from one window to another so tab takes
me down here tab to the first window second window press Enter to collapse that enter to open it up
I can press forward slash and that'll allow me to change the protocol so to SDP as an example.
Now I can see spending three messages once again clicking you have for like ya GOP Click Apply there's
my GOP messages once again.
Source IP address.
Destination 2 2 4 0 0 10 well-known multicast address for EAI GOP so I'm using my mouse but I could
use a keyboard.
So up and down keys enter key and to key again.
And to key here to see parameters.
Notice they're my k values and to keep to C software version information into up key and to press tab.
And now I can go up and down through the protocols forward slash I could specify let's say SDP again
and click apply.
Here's my spending 3 protocol so I can see the root identifier etc etc. So I'm not going to bore you
through all the options in this application.
Have a look on github.
Lot of good examples and documentation on GitHub but I'm hoping this has shown you a really nice application.
You can run term shock through a console and read tea shock messages tea shock is great because I could
put sniffers in different parts of my network and not have to use a application with a graphical user
interface.
I can also schedule it so I could use cron just to schedule t shock to capture traffic if I wanted to.
There are a lot of options with t shock and term shock is great because it allows you to view the T
shock captures directly through a console.
Okay so I hope you've learned something.
I hope you've enjoyed this video.