Network forensics with PcapXray
Within the set of tools that can help us analyze the packets that are being exchanged in a network, we can highlight the Wireshark packet analyzer.
Applications such as Wireshark offer us the possibility of analyzing network traffic and later saving this information in a file in pcap format. This format is one of the most commonly used for storing network packet data created during a real-time network capture and is often used to apply filters to the captured packets and analyze their characteristics.
However, when we have a very large pcap file with a large amount of information, it is sometimes difficult to determine what is happening on the network.
At this point, we can find other tools that can help us in the analysis, among which we can highlight PcapXray. This tool offers us visual network diagrams with all the incoming and outgoing traffic from a capture that we have made previously.
This tool allows us to graphically display all...