Questions tagged [pcap]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
71 views

Application ip control

My goal is to analyze the traffic of an Android application, to check if it contacts any unofficial IPs. Using PCAPRemote I created a connection log file and transferred it to the PC, where I am ...
user avatar
  • 1
2 votes
1 answer
75 views

What is the best way to create a PCAP file containing malicious traffic?

I'm in my last year of university and for my honour's project I am tasked with comparing two intrusion detection systems, snort and suricata, hosted on a virtual machine on my PC. As I have no access ...
user avatar
  • 21
0 votes
0 answers
75 views

Listening to other network traffic on a known WiFi network using libpcap

I want to use libpcap to listen to the network traffic on another server on my home WiFi network. In this scenario i already know the password and ssid. I have already changed my network adaptor to be ...
user avatar
  • 101
0 votes
0 answers
156 views

Snort does not detect attacks when running in offline mode

When I run Snort on a pcap file (that contains malicious traffic), it does not detect anything. I uncommented the rules path in Step #7 at snort.conf. Nothing is changed. How to let Snort detect ...
user avatar
  • 1
1 vote
1 answer
83 views

SIEM-like tool for pcaps [closed]

Is there any tool that accepts a packet capture file as input and displays all the network traffic in a similar way to how a SIEM displays log information? I'm looking for a summary of the ports and ...
user avatar
  • 638
4 votes
2 answers
7k views

How to recognize Tor traffic

Having a PCAP file with Tor traffic, is there a way fast enough to recognize if any of the packets are part of Tor traffic/sessions? Some tools speak about "protocol identification via ...
user avatar
  • 147