I'm admittedly not impressed by the pcap processing. It identifies a bunch of fragments of HTTP headers as "YouTube Video ID". Meanwhile, I can get the same i

I'm admittedly not impressed by the pcap processing. It identifies a bunch of fragments of HTTP headers as "YouTube Video ID". Meanwhile, I can get the same info and more by running $ strings FollowTheLeader.pcap *]?> GET / HTTP/1.1 Host: 10.0.2.5 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache HTTP/1.0 200 OK Server: SimpleHTTP/0.6 Python/3.7.3rc1 Date: Sun, 14 Jul 2019 02:42:13 GMT Content-type: text/html Content-Length: 105 Last-Modified: Sun, 14 Jul 2019 02:41:10 GMT <h1>My Flag Web Page</h1> <p>Hi there! Have a flag!</p> <p>Here is your flag: ctfa{terrific_traffic}</p>