search

USArmyResearchLab / Dshell

Dshell is a network forensic analysis framework.
Other
5.45k stars 1.15k forks source link

is it possible to include the sample pcap in the project? #25

Closed zinking closed 9 years ago

zinking commented 9 years ago

I haven't do the network data capture and analysis for quite a while. mainly because being lazy. is it possible to include those pcap files mentioned in the README file ?

mboman commented 9 years ago

Wouldn't it be better if a download script was created instead? Putting a lot of unnecessary binary blobs in the repository isn't cool.

RyPeck commented 9 years ago

If it is small enough it isn't too much trouble. But there are more than a few websites hosting PCAP that you could download samples from.

http://www.netresec.com/?page=PcapFiles http://www.malware-traffic-analysis.net/ (MALWARE Samples) https://code.google.com/p/security-onion/wiki/Pcaps (list of samples @Security-Onion has included)

rmac75 commented 9 years ago

We can link to the honeynet projects pcap such as http://www.honeynet.org/files/attack-trace.pcap_.gz if that is helpful.

On Thu, Feb 5, 2015 at 4:15 AM, Michael Boman notifications@github.com wrote:

Wouldn't it be better if a download script was created instead? Putting a lot of unnecessary binary blobs in the repository isn't cool.

— Reply to this email directly or view it on GitHub https://github.com/USArmyResearchLab/Dshell/issues/25#issuecomment-73015772 .

Seek elegance.

wglodek commented 9 years ago

@RyPeck @rmac75 These are great resources for pcap. At this time there is no plan to include pcap in the repo.

RyPeck commented 9 years ago

@wglodek A good in between would be to provide a link to a sample that exercises some of the capabilities of Dshell! Maybe you could find one from some of the sources @rmac75 and I pointed out.