FAQ

FAQ

How do I make rules? ...

I have everything setup, but traffic doesn't show up the streams tab:

The streams tab is where decoded protocols are shown. Unlike protocol analyzers like wireshark, the streams tabs shows only those protocols we decode like HTTP and SSL right now. If you think you have this configured, make sure that mallory is logging the traffic. You should see the HTTP traffic and something that looks like this:

 [*] [2011-07-26 08:20:35,334] DEBUG:HTTP: starting s2c 
 [*] [2011-07-26 08:20:35,335] DEBUG:HTTP: starting http request 
 [*] [2011-07-26 08:20:35,343] INFO:HTTPRequest: HTTP/1.1 : GET : /

If you don't see that. Then you have to create a debug rule first. See the rules section of the documentation.