PcapXray - A Network Forensics Tool.

PcapXray – A Network Forensics Tool.

PcapXray – A Network Forensics Tool – To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction.

Goal:
Given a Pcap File, plot a network diagram displaying hosts in the network, network traffic, highlight important traffic and Tor traffic as well as potential malicious traffic including data involved in the communication.

Solution: Speed up the investigation process
+ Make a network diagram with the following features from a Pcap file Tool Highlights:
+ Network Diagram – Summary Network Diagram of full network
+ Information:
+ Traffic with Server Details
+ Tor Traffic
+ Possible Malicious traffic
+ Data Obtained from Packet in Report – Device/Traffic/Payloads
+ Device Details

PcapXray

Components:
– Network Diagram
– Device/Traffic Details and Analysis
– Malicious Traffic Identification
– Tor Traffic
– GUI – a gui with options to upload pcap file and display the network diagram

Use and Download:

Source: https://github.com/Srinivas11789