Packet capture analysis with PcapXray

Much like NetworkMiner, PcapXray is another powerful and comprehensive packet capture analysis tool. Some of the main features of this tool are the identification of malicious, web, and even Tor traffic, and covert communication.

Let's install PcapXray by cloning it from GitHub by typing the following command in the Terminal. As usual, I've changed my directory to Desktop. Cloning PcapXray to your desktop will take some time as the file is 115 MB in size:

git clone https://github.com/Srinivas11789/PcapXray.git

The following screenshot shows the output of the command:

Figure 11.32 – Cloning PcapXray to the Desktop

Next, we need to install python3-pip to ensure that pip version 3 will be available to install any requirements.

Let's begin by installing Python by running this command in the terminal:

apt install python3-pip

The following screenshot shows the output of the command:

...