Xplico 1.0.0

The goal of Xplico is extract from an internet traffic capture the applications data contained.<br />For example, from a pcap file Xplico extracts each email (POP, IMAP, and SMTP protocols), all HTTP contents, each VoIP call (SIP), FTP, TFTP, and so on. Xplico isn???*a*?t a network protocol analyzer. Xplico is an open source Network Forensic Analysis Tool (NFAT).<br />Xplico is released under the GNU General Public License and with some scripts under Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported (CC BY-NC-SA 3.0) License. For more details see License.<br /><br />Features<br /><br /> Protocols supported: HTTP, SIP, IMAP, POP, SMTP, TCP, UDP, IPv6, ???*A*;<br /> Port Independent Protocol Identification (PIPI) for each application protocol;<br /> Multithreading;<br /> Output data and information in SQLite database or Mysql database and/or files;<br /> At each data reassembled by Xplico is associated a XML file that uniquely identifies the flows and the pcap containing the data reassembled;<br /> Realtime elaboration (depends on the number of flows, the types of protocols and by the performance of computer -RAM, CPU, HD access time, ???*A*-);<br /> TCP reassembly with ACK verification for any packet or soft ACK verification;<br /> Reverse DNS lookup from DNS packages contained in the inputs files (pcap), not from external DNS server;<br /> No size limit on data entry or the number of files entrance (the only limit is HD size);<br /> IPv4 and IPv6 support;<br /> Modularity. Each Xplico component is modular. The input interface, the protocol decoder (Dissector) and the output interface (dispatcher) are all modules;<br /> The ability to easily create any kind of dispatcher with which to organize the data extracted in the most appropriate and useful to you;

Requirements:	No special requirements
Platforms:	*nix, Linux
Keyword:	Access,  Computer,  External,  Inputs,  Lookup,  Packages,  Packet,  Reassembly,  Reverse,  Verification
Users rating:	0/10