Packet Scrubber - Enterprise Packet Analysis

2. Filtering Options

Simple Filters (Optional)

Server IP:

Port:

Protocol:

Max Packets:

3. Analysis Options

⚡ Enable All Modules Run every analysis in one pass

Core Analysis

🔍 DLP Scan Credit cards, SSNs, API keys, passwords 📁 File Extraction Carve PNG/PDF/ZIP/EXE from TCP streams 🌐 Deep L7 Analysis 300+ protocols via pyshark (requires tshark) 🔥 Firewall Detection RST injection, silent drops, ICMP unreachable 📊 Payload Entropy Flag encrypted or packed payloads 🧠 Behavioral Analysis Beaconing, exfiltration, port scanning

Threat Intelligence

⚠️ Threat Feeds AbuseIPDB, VirusTotal, AlienVault, ThreatCrowd 🦊 ThreatFox Abuse.ch — IPs and extracted file hashes 🌍 GeoIP + ASN MaxMind or IPInfo enrichment 🎯 YARA Scan Payload scan with built-in rules

Protocol Extraction

🔎 Extract DNS All queries and responses with answers 📡 Extract DHCP Family DHCP, BOOTP, and DHCPv6 records

Threat Intelligence Configuration

Threat Feeds:

ThreatCrowd (Free) AbuseIPDB VirusTotal AlienVault OTX

4. Streaming Threat Intelligence (Live)

🌑 DarkAPI.io Dark web threat intelligence 🧬 DNSScience.io DNS-based reputation ✓ VeriBits Verified threat intel

API Key:

Stream IDs:

5. Scrubbing & Anonymization

🧹 Enable Scrubbing Scrub Source IP Scrub Destination IP Scrub Payload Data

🔒 Packet Scrubber

1. Upload Packet Capture