Packet capture analysis with PcapXray

Much like NetworkMiner, PcapXray is another powerful and comprehensive packet capture analysis tool. Some of the main features of this tool are the identification of malicious traffic, covert communication, web, and even Tor traffic.

We will now install and configure PcapXray within Kali Linux and then begin analyzing a packet capture file:

1. Let’s install PcapXray by cloning it from GitHub by typing the following command in the Terminal:

   sudo git clone https://github.com/Srinivas11789/PcapXray.git

As usual, I’ve changed my directory to the desktop. When cloning PcapXray to your desktop, this will take some time, as the file is 115 MB in size.

Figure 16.19 – Cloning PcapXray into Kali

2. Next, we need to install graphviz by typing the following:

   sudo apt install graphviz

The following figure shows the output of the preceding command:

Figure 16.20...