Link Search Menu Expand Document


The ultimate goal of many traffic analysis tasks is to extract information from a set of packets to identify an object, such as an application. pcapml creates a standard format for researchers to interface with using standard traffic analysis tools.

To facilitate faster and simpler traffic analysis pipelines, we’ve created pcapML_FE (Feature Explorer), which enables researchers to focus their efforts on new methods of information extraction* as opposed to dataset interaction, parsing, and metadata attachment. pcapml_fe interacts directly with pcapml encoded datasets, exposing an iterator over traffic samples and their associated metadata.

Table of contents