View unanswered posts | View active topics It is currently Wed Oct 16, 2019 5:00 am



Post new topic Reply to topic  [ 2 posts ] 
 Not full packet capture 
Author Message

Joined: Wed Sep 29, 2010 4:46 am
Posts: 5
Reply with quote
Post Not full packet capture
Hi,

Pcap files I am analyzing doesn't have full packet capture but header and few starting bytes of contents, and I don't get any results from xplico except for dns resolution. Is that a normal behaviour? Can I get some information about the application layer protocols like get request etc.

Thanks
MAK


Thu Sep 30, 2010 12:45 am
Profile

Joined: Wed Sep 16, 2009 10:45 pm
Posts: 128
Reply with quote
Post Re: Not full packet capture
Hello,

just try to capture the full packets. In example, use "tcpdump -s0" to get so.

Carlos.


Thu Sep 30, 2010 6:40 am
Profile
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Designed by Vjacheslav Trushkin for Free Forums/DivisionCore.