VirusTotal Can Now Analyze Network Traffic

Popular online virus scanning service VirusTotal, which can analyze user submitted samples for infection using more than 40 anti-virus scanners, has added a PCAP analyzer to its arsenal. The PCAP scanner can analyze network capture files (PCAP files) obtained from network traffic scanners like Wireshark or tcpdump, and analyze them for signs of infection, network intrusion and exploitation.

To perform a check, users need to use any network traffic scanners capable of create a dump of the captured traffic in the PCAP format. The PCAP file then needs to be uploaded to VirusTotal the same way people submit EXE, PDFs and other file for analysis. VirusTotal will then extract the contents of the PCAP files and process it using popular intrusion detection systems such as Snort and Suricata and log the rules that they trigger. VirusTotal will also list all DNS resolution performed and all HTTP communications. Analysis of network traffic can often reveal communication between a malware or botnet client and its command server, cross-site scripting, malicious code injection from a remote server, and other types of attacks which may otherwise go undetected.

Currently, VirusTotal employs only two intrusion detection analyzer - Snort and Suricata, but we can expect to see more scanners and analyzers being added in future.

virustotal-pcap-analyzer

via VirusTotal

Comments

69 alternatives to the default Facebook profile picture

If you have changed the default Facebook profile picture and uploaded your own, it’s fine. But if not, then why not replace that boring picture of the guy with a wisp of hair sticking out of his head with something different and funny?

How to Record CPU and Memory Usage Over Time in Windows?

Whenever the computer is lagging or some application is taking too long to respond, we usually fire up task manager and look under the Performance tab or under Processes to check on processor utilization or the amount of free memory available. The task manager is ideal for real-time analysis of CPU and memory utilization. It even displays a short history of CPU utilization in the form of a graph. You get a small time-window, about 30 seconds or so, depending on how large the viewing area is.

How to Schedule Changes to Your Facebook Page Cover Photo

Facebook’s current layout, the so called Timeline, features a prominent, large cover photo that some people are using in a lot of different creative ways. Timeline is also available for Facebook Pages that people can use to promote their website or business or event. Although you can change the cover photo as often as you like, it’s meant to be static – something which you design and leave it for at least a few weeks or months like a redesigned website. However, there are times when you may want to change the cover photo frequently and periodically to match event dates or some special promotion that you are running or plan to run. So, here is how you can do that.

Instant Fundas

Search This Blog