close
The Wayback Machine - https://web.archive.org/web/20220413010420/https://github.com/CERT-Polska/drakvuf-sandbox/issues/471
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Network summary in web UI #471

Open
icedevml opened this issue Mar 11, 2021 · 3 comments
Open

Network summary in web UI #471

icedevml opened this issue Mar 11, 2021 · 3 comments
Labels
drakcore/gui good first issue priority:low

Comments

@icedevml
Copy link
Contributor

@icedevml icedevml commented Mar 11, 2021

Parse PCAP and display some small network summary in the web UI (e.g. list of TCP connections, DNS/HTTP requests etc)

@icedevml icedevml added good first issue drakcore/gui priority:low labels Mar 11, 2021
@0x0elliot
Copy link

@0x0elliot 0x0elliot commented Oct 15, 2021

Hey! I would like to contribute to this issue. Would you mind expanding upon the instructions so that It is easier for me? I am still trying to understand the project! As in mainly, which PCAP files do i need to parse? Which files should I mainly be focusing on etc.

@BonusPlay
Copy link
Collaborator

@BonusPlay BonusPlay commented Oct 17, 2021

As can be seen here DRAKVUF Sandbox is recording all traffic in & out of the VM. There's 1 PCAP being created for each analysis. What needs to be done is some kind of parsing during postprocess phase - which we already do with plugin logs. After extracting list of addresses the VM connects to, it needs to be saved and presented in human friendly GUI form in web view.

@mohamedmostafadawood
Copy link

@mohamedmostafadawood mohamedmostafadawood commented Mar 21, 2022

#701 @BonusPlay
May you please check this ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
drakcore/gui good first issue priority:low
Projects
None yet
Development

No branches or pull requests

4 participants