News for hackers. Stuff that matters.
Re:Running a Wall of Sheep in the Wild by nailer on Sunday October 28, 2018 @10:47AM (#18320812)
To save you time, because they don't mention it until they show you the logs later:

The main tech here - that reassembles images from HTTP - is 'driftnet'.

Apt get or yum install it or pacman etc on any Linux distro.

Re:Running a Wall of Sheep in the Wild by stevemcgrath on Monday October 29, 2018 @12:27AM (#18325055)
Actually, it Dofler uses driftnet, ettercap, dsniff, tshark, ngrep, and PVS and wired them together into a web front-end. Driftnet was the component that made porn filtering very hard, as driftnet gives you no indication of WHERE the image came from, just that it found something.