Dshell is a network forensic analysis framework.
Stars
5.5k
Forks
1.1k
Watchers
5.5k
Open Issues
4
Overall repository health assessment
No package.json found
This might not be a Node.js project
Added exception handler to core.py for when IPv6 packets are processed that do not have fragmentation flags set in their headers.
d7b9f0bView on GitHubUpdated decode.py with new connection management arguments and a way of handling packet timeouts when listening live on an interface
809f599View on GitHubAdded long description to netflow plugin to describe default output fields
cafe3c5View on GitHubEfficiency updates to core.py to reduce how often we loop over packet lists by adding more caching and convenience functions. Should significantly improve processing time for large capture files.
df6e791View on GitHubUpdated core.py to use 5-tuple (addresses, ports, and protocol) for a connection tracking key instead of a 4-tuple
030e6e5View on GitHubUpdates to core.py's handling of IP defragmentation to ensure that correct port numbers are used for reassembled packet. If first packet is missing, a debug message is printed and entire packet is dropped.
4636882View on GitHubUpdated netflow output module to fix grouping error and add 'header' oarg. Added "tab" delimiter to output.py.
5d0263aView on GitHubUpdated CSV output module to fix oarg bug and add 'flows' convenience feature
9c45414View on GitHubMerge pull request #150 from USArmyResearchLab/dek443-color-blind-friendly-patch
37a4231View on GitHub