4 ms·
If all you need are connection info, pump the pcap through zeek and you'll get a nice set of rich tab delimited log files you can analyze.
by bane 6y ago
If all you need are connection info, pump the pcap through zeek and you'll get a nice set of rich tab delimited log files you can analyze.
- fiddlerwoaroof 6y agoYeah, zeek is a great tool. It took me a while to recognize it, though, the last time I used it, it was still called “bro”.