Trisul Network Analytics
Developer Zone

User Tools

Site Tools

You are here: Home » offline » Processing the DEFCON 26 CTF PCAPS using Trisul NSM
Trace: • How to redirect Netflow to Trisul across network segments using NAT • Suricata-EVE-Unixsocket • QUIC protocol analysis using the Trisul Scripting API
offline:defcon26ctf

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
offline:defcon26ctf [2018/11/12 22:59] – [Port connections over time] veeraoffline:defcon26ctf [2018/11/12 23:00] (current) – [Port connections over time] veera
Line 142: Line 142:
 {{:offline:dc26-9.png?800|}} {{:offline:dc26-9.png?800|}}
  
 +
 +===== Conclusion=====
  
 Hope network analysis enthusiasts find this useful.   The docker image  bundles a [[https://trisul.org|Free License of Trisul]]. PCAP dumps upto 3 days in time can be imported.  Hope network analysis enthusiasts find this useful.   The docker image  bundles a [[https://trisul.org|Free License of Trisul]]. PCAP dumps upto 3 days in time can be imported. 
offline/defcon26ctf.1542043783.txt.gz · Last modified: 2018/11/12 22:59 by veera