Fedora Project

Analyzing pcap files to get details of a Network Traffic

As Wikipedia says, pcap is an application programming interface (API) for capturing network traffic. These files are primarily utilized in analyzing the network characteristics of a certain data. These files are used to determine network status, allowing analyzers to attend to problems that may have occurred on the network and allowing them to study data communications. You will be given a pcap file and you need to analyse the following things from it:

  • Visited Sites
  • User-Agents
  • Connection details(TCP, UDP, ICMP, IP, SMTP, SMB, ARP)
  • Grep Mode
  • IP List
  • Ports Present

NOTE: You are allowed to use tshark, tcpdump, ngrep, and all the tools you need to achieve the task. Please try to keep the programming language limited to python/shell(If you are planning to use another language inform me beforehand.)

This is The Output of my program.

Deliverables:

Share the code in GitHub/Pagure with the ASCIINEMA included.

Contact Mentor:

Please do not copy someone else's work from the internet. If you have doubts contact the Fedora Summer Coding group using telegram. If you are not already a member you can join the group https://t.me/fedoraSummerCoding

Download the pcap file from the link given at the end of the task.

Task tags

  • cyber-security

Students who completed this task

VH-tech, skr1p7, ns0631, paraxor, Abtaha, Ayush19, justan00b, synnek, Suhas, Chenlitw, Sash713, EmperorAj, Rajvardhan

Task type

  • code Code
close

2019