анализ http

sudo tcpflow -c -i eth0 host 92.111.111.111 and port 80

Вывод вида: "Referer: http://d4arvin.blogspot.com/2011/12/http.html"
sudo tcpflow -c -i eth0 host 92.111.111.111 and port 80 | grep Referer | sendxmpp -s '80' -r '80' -i user@jabber.ru