Analyzing pcap files to get details of a Network Traffic
As Wikipedia says, pcap is an application programming interface (API) for capturing network traffic. These files are primarily utilized in analyzing the network characteristics of a certain data. These files are used to determine network status, allowing analyzers to attend to problems that may have occurred on the network and allowing them to study data communications. You will be given a pcap file and you need to analyse the following things from it:
- Visited Sites
- User-Agents
- Connection details(TCP, UDP, ICMP, IP, SMTP, SMB, ARP)
- Grep Mode
- IP List
- Ports Present
NOTE: You are allowed to use tshark, tcpdump, ngrep, and all the tools you need to achieve the task. Please try to keep the programming language limited to python/shell(If you are planning to use another language inform me beforehand.)
This is The Output of my program.
Deliverables:
Share the code in GitHub/Pagure with the ASCIINEMA included.
Contact Mentor:
Please do not copy someone else's work from the internet. If you have doubts contact the Fedora Summer Coding group using telegram. If you are not already a member you can join the group https://t.me/fedoraSummerCoding
Download the pcap file from the link given at the end of the task.