The ultimate goal of many traffic analysis tasks is to extract information from a set of packets to identify an object, such as an application.
pcapml creates a standard format for researchers to interface with using standard traffic analysis tools.
To facilitate faster and simpler traffic analysis pipelines, we’ve created
pcapML_FE (Feature Explorer), which enables researchers to focus their efforts on new methods of information extraction* as opposed to dataset interaction, parsing, and metadata attachment.
pcapml_fe interacts directly with
pcapml encoded datasets, exposing an iterator over traffic samples and their associated metadata.