Applications/Wireshark.app/Contents/MacOS/capinfos In my case (MacOS), capinfos was found here:
It resides in the Wireshark directory, same as tshark and reordercap – the other CLI tools that ship with Wireshark. Grab a sample PCAP fileĬapinfos is a CLI tool that ships with Wireshark and can be useful to derive quick insights about the PCAP.
We will be using sample pcaps in this post. How do we then swiftly perform a PCAP analysis that covers maximum ground? This post provides a quick summary of analysis that can be done by Wireshark and its accompanying CLI tool, tshark. However, PCAPs contain massive amounts of data that is difficult to parse and time is valuable, especially during live investigations. PCAPs can greatly aid an investigation after an incident has occurred.
0 kommentar(er)
