email decoding
Page 1 of 1

Author:  Rampage [ Tue Jan 26, 2016 1:14 am ]
Post subject:  email decoding

i'm sorry to bother you with this probably dumb question.

i'm processing a pcap file containing may SMTP sessions.

Appearently the smtp sessions are decoded properly and i can view them unde the uncategorized section of the xplico user interface.

yet i cant see the email section being populated.
Is it working as intended? is explico supposed to parse and interpret emails from SMTP sessions or the email decoding works only for pop3 imap and webmails?

Thanks in advance, looking forward for your help

Author:  gianluca.costa [ Thu Jan 28, 2016 10:18 pm ]
Post subject:  Re: email decoding

Hi Rampage,
SMTP is decoded by Xplico... but may be there is bug. To help us can you send us the pcap file?


Author:  Rampage [ Sat Jan 30, 2016 12:20 am ]
Post subject:  Re: email decoding

Hello Gianluca,
thanks for your reply.

Unfortunately i cant share the pcap file because it contains sensitive informations.

Maybe if you can point me in the right direction i can try to do some debugging myself.

maybe provide you with some logging and tracing of the decoding process?

Page 1 of 1 All times are UTC
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group