CapAnalysis is a freeware toolset that performs a variety of tasks, similar to Xplico. CapAnalysis allows incident response analysts to review large packet capture files and parse out TCP, UDP, and ESP streams. Analysts also have the ability to filter out IP addresses, ports, protocols, as well as tie data flows to specific geographical areas.
CapAnalysis can be downloaded from the site http://www.capanalysis.net/ca/#download. The download package contains an installer. Simply click on the Install button and the package will install.
Once installed, navigate to http://localhost:9877. From here, analysts can configure a password ...
