CRIMEX / cyber
Network intelligence
Packet capture
Analysis works on capture files. A browser cannot capture arbitrary network traffic.
Analysis job
Not analysed
Sample resultsIllustrative output for synthetic capture office-gw-0912.pcapng. Not results from your selected file.
Flow explorer
4 flows
| Source | Destination | Proto | Packets | First | Last | |
|---|---|---|---|---|---|---|
| 10.0.4.17:51522 | 203.0.113.45:443 | TLS | 4820 | 22:00:14 | 04:59:02 | |
| 10.0.4.17:53011 | 10.0.0.2:53 | DNS | 428 | 22:00:13 | 04:59:01 | |
| 10.0.4.22:49810 | 198.51.100.10:443 | TLS | 612 | 09:12:40 | 09:20:11 | |
| 10.0.4.31:60122 | 192.0.2.80:80 | HTTP | 402 | 11:04:02 | 11:04:40 |
10.0.4.17:51522 → 203.0.113.45:443
Illustrative High
Illustrative repeated outbound sessions; periodicity is a review signal, not proof of malware.
Source: office-gw-0912.pcapng · 22:00:14–04:59:02 · 4820 packets
10.0.4.17
203.0.113.45
10.0.0.2
10.0.4.22
198.51.100.10
10.0.4.31
192.0.2.80
ILLUSTRATIVE TOPOLOGY / NOT LIVE TRAFFIC
Protocol breakdown (packets)
- TLS6,120
- DNS1,844
- HTTP402
- ARP260
- Other684
Connection window · TLS
22:00:1404:59:02
10.0.4.17:51522 → 203.0.113.45:443
4,820 packets in supplied sample flow. No per-minute measurements available.
Indicators
This page shows the shared sample view. Open a case to see its own cyber findings.