D
Hi,
i did a little script a while a go and i would like to share it with you as you all know facebook chat logs that can be found in cache directory of internet explorer, those logs are individual text files, copy those files into a directory and put the script in the same directory run it it will generate an excel file containing chat conversation and time stamp
download and im happy to hear from you.
hey hi…can u temme d fb chat protocol based on whic ur prog works???
n if its d older version of d protocol..den can u send me ne sample fb chat artifacts on whic dis prog 'll work…???
Thanks
hey hi…can u temme d fb chat protocol based on whic ur prog works???
n if its d older version of d protocol..den can u send me ne sample fb chat artifacts on whic dis prog 'll work…???Thanks
its JSON init blood.
hey hi…can u temme d fb chat protocol based on whic ur prog works???
n if its d older version of d protocol..den can u send me ne sample fb chat artifacts on whic dis prog 'll work…???Thanks
It's bad enough having to translate "text" speak while dealing with a forensics case…
Sorry but just trying to run it on my own local machine and not having any joy.
I use firefox and regularly chat with friends on Facebook but running this in the Mozilla temp directory did nothing. I didn't think FB stored any plain text files from chat….I have to admit I'm not up to date on FB forensics as I've not had to do anything with that for some time now.
What am I missing here?
If the program parses p_xxxx.txt files, then I think these are sadly no longer used by FB. Also, it will only work if you've been using IE as I don't think Firefox saves them.
Edit; now that I look at it, it doesn't do that at all. I think it parses through every .txt file in your chosen directory and splits it using double-quotes, commas, and.. colons? (my Perl is pretty rough, sorry)
Although it's interesting, wouldn't you get better results using a JSON parser? (Having said that, I'm not sure FB even uses JSONs these days)
I thought most of those chat programs were moving to squlite type stuff…at least MSN chat was at one point but I'm sadly out of sync on that stuff…until someone pays me to examine one again D