lovejotd

Overall Offset of Packet within File

3

Is there anyway when I processing files, to know the offset of the current packet within the larger pcap file? I am having a hard time figuring/finding it out, and...

Email or SMTP

2

I am looking for a way to process email or smtp data from a pcap file, has anyone done this before? Do you have any insight? Thanks!

Build a dll

1

Is it possible to build a dll for the libyara project? when I try in visual studio, it throws errors. Lib or exe works fine.

l2tp Packet is not pulling sessionID

10

When I run analysis on a L2tp Packet, the session ID is showing up as 0, but when I open the same packet in wireshark, It shows the session ID...

Example for Open File

3

Is it possible to leverage this on opening a pcap instead of pulling from the device itself? If so, can you provide a short example?

libyara.dll

1

Does anyone have updated instructions or know how to get libyara.dll? I tried to do the cmake commands, but it seems that yara nolonger has the libs directory or cmake...