Search Results for "packet"

...Brim is a desktop app to explore, query, and shape the data in your super-structured data lake. Brim is an open source desktop application for security and network specialists. Brim makes it easy to search and analyze data from packet captures, like those created by Wireshark, and structured logs, especially from the Zeek network analysis framework. Brim is especially useful to security and network operators that need to handle large packet captures, especially those that are cumbersome for Wireshark, tshark, or other packet analyzers. Inspired by the Unix-tools design pattern, everything Brim does can be run from the command line. ...

An extensible network forensic analysis framework. Enables rapid development of plugins to support the dissection of network packet captures. This is a major framework update to Dshell. Plugins written for the previous version are not compatible with this version, and vice versa. By extension, dpkt and pypcap have been replaced with Python3-friendly pypacker and pcapy (respectively). Enables development of external plugin packs, allowing the sharing and installation of new, externally-developed plugins without overlapping the core Dshell libraries. ...

Xplico is a Network Forensic Analysis Tool (NFAT). The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email (POP, IMAP, and SMTP protocols), all HTTP contents, each VoIP call (SIP, MGCP, MEGACO, RTP), IRC, WhatsApp... Xplico is able to classify more than 140 (application) protocols. Xplico cam be used as sniffer-decoder if used in "live mode" or in conjunction with netsniff-ng. Xplico is used...

... * Up to 128 satellites simulation; * Selection coordinates on map; * NMEA 0183 output format; * Simulation packets GGA, GSA, GSV, RMC, VTG, ZDA, GLL, HDT; * 2 methods packet generation; * Output to serial; * Output to file; COM port emulator This application tested on com0com emulator. Can be downloaded hear http://sourceforge.net/projects/com0com Libraries If you have problems with running application, try installing Microsoft redistributables. Can be downloaded http://www.microsoft.com/downloads/en/details.aspx?...

NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows that can detect the OS, hostname and open ports of network hosts through packet sniffing or by parsing a PCAP file. NetworkMiner can also extract transmitted files from network traffic. New versions of NetworkMiner are released exclusively on www.netresec.com since version 2.0 of NetworkMiner. This page on SourceForge is only kept to provide hosting of older versions of the software. To get the latest version of NetworkMiner, please visit: http://www.netresec.com/?...

A proof-of-concept application of the Statistical Protocol IDentification (SPID) algorithm. SPID can detect the application layer protocol (layer 7) by analysing flow (packet sizes etc.) and payload statistics (byte values etc.) from pcap files.

The goal of this project is to create a set of workflows that treat tcpdumps/packet captures as just another sort of data to be loaded into relational structures and manipulated using the well-established methods of relational databases.

...Tools for creating and destroying the communication queues, loading/saving PCM 44100 Hz to/from the signal processing chain, windowing the data (currently only a Hann windowing function module), performing a Discrete Fourier Transform (DFT) on the data (using FFT, currently only real part), detecting the presence of an event within a data segment/packet via normalized spectral signature matching/comparison, and the generation of a midi file from the detection of said patterns (i.e., event occurrences) as output are currently available.