Skip to content

ferhatelmas/ovizart-qualification

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Explanations

  1. First question is done via scapy. Values are normalized by the total number of the connections in the capture.
  2. Second question is done via d3.js
  3. I have imported a library to parse IRC. After getting results, I have just written them into a file. Rest will depend on the application logic and I think it isn't interesting in terms of this test because what is left is only strings and extracting related parts in only string manipulation, not protocol dissecting.
  4. Again, in terms of dissecting, I have used default IP, TCP layers of scapy. I have tried to check retransmission in the capture. Even if question is stated to encourage DNS packets, DNS packets are clean and suspicious activity are triggered a remote shell running on DNS port.

About

Helper to be selected for GSoC

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages