This program is used to analyze captured network traffic (pcaps) for indicators of malicious activity It currently supports parsing HTTP, DNS and TCP traffic USAGE: + "python pcap_parser.py [Path to PCAP file] + [VirusTotal API key] + [Number corresponding to desired traffic]
- HTTP requests
- DNS queries 3.TCP connections 4.All of the above 5.TCP Payload data 6.UDP Payload data