i have a file that capture network traffic in format of pcap. i want to extract some information of this pcap file for each class of traffic (http, ftp, ...) . this information is :

  1. average Request Length ,
  2. average number of Requests Per connection ,
  3. average Reply Length ,
  4. average number of Replies Per Request ,
  5. average Time Between Requests ,
  6. average Time To Respond ,
  7. average Time Between connections

please introduce me a tool that i can extract these informations from pcap file using it

  • Welcome, what is a pcap file, from where do you get it? – albert Aug 4 '19 at 10:06
  • thanks. it is iscx dataset. i get it from unb.ca/cic/datasets/ids.html – Alicee Aug 4 '19 at 10:15
  • iscx is just as unknown to me, is it a binary file, ASCII file, .... When a human readable file show the first few lines (as text!) in your question. – albert Aug 4 '19 at 10:17
  • no it is a pcap file ( network traffic capture) – Alicee Aug 4 '19 at 10:29
  • maybe en.wikipedia.org/wiki/Pcap gives some starting points / possibilities to read such files. – albert Aug 4 '19 at 10:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.