Watch network traffic for curlable HTTP requests that could can replayed.

pcap2curl__http.rb

require "pcaprub"

capture = Pcap.open_live(Pcap.lookupdev, 65535, true, 1)

loop do
  while packet = capture.next
    if data = /\b(GET|POST|PUT|PATCH|DELETE|HEAD|CONNECT|OPTIONS|TRACE) ([^ ]+) (HTTP\/[0-9\/]+)/.match(packet)
      method, path, version = data.captures
      headers = packet.scan(/\S+\b:\s.+/).map(&:strip)
      url = (headers.grep /\bHost:\s.+/).first.split(":").last.strip
      command = "curl " + url + " -X " + method + " " + headers.map { |h| h = "-H " + "'" + h + "'" }.join(" ")
      puts
      puts command
      puts
    end
  end
end