pcap-analysis

To compute inter-arrival time statistics from a PCAP file, load your packet captures and apply the iat_stats helper function to quantify traffic characteristics and detect anomalies like beaconing.

Detect port scans and DoS patterns in network traffic by computing graph metrics and per-minute traffic patterns from PCAP captures using the packets_per_minute_stats and graph_metrics functions.

Yes, you can use Python to filter PCAP traffic by protocol to inspect IP, TCP, UDP, and ICMP traffic using the load_packets utility and scapy dependency.

This PCAP analysis approach is applicable for security analysts and network engineers performing traffic characterization on small to medium PCAP datasets, rather than large-scale captures.

Count unique network flows and extract topology metrics from packet captures by loading packets and applying the flow_metrics and graph_metrics functions to derive unique source and destination counts.

Yes, you need scapy installed as a dependency to run entropy-based assessments and compute network statistics from PCAP files using the provided utility functions.