Xplico

Ubuntu 12.04 and VirtualBox Image

Gianluca C. — Fri, 04 May 2012 00:01:07 +0000

The VirtualBox image of Xplico 1.0.0 can be downloaded here. Xplico for Ubuntu 12.04 can be installed following the howto or it can be downloaded here. We are developing the new version, some new features, like the use of nDPI library, may be tested with the Demo (Xplico in the cloud) . Any feedback is welcome. [...]

net-sniff-ng the packet sniffing beast

Gianluca C. — Tue, 10 Apr 2012 00:43:27 +0000

In past we have written about net-sniff-ng and we have used it in tandem with Xplico. In recent days Daniel Borkmann has released a new version of net-sniff-ng, in this new version there are many improvements and new feature. With the last version 0.5.6 net-sniff-ng can be used with Xplico without apply any patch. So [...]

DEFTCON 2012

Gianluca C. — Tue, 20 Mar 2012 08:37:39 +0000

We will participate in the DEFTCON 2012 in Turin (Italy) on March 30. The conference will be in Italian, more information and the event program can be found here. To register, write to deftcon@deftlinux.net.

Xplico 1.0.0 Released

Gianluca C. — Mon, 27 Feb 2012 00:34:39 +0000

Xplico 1.0.0 is now available! ChangeLog: SQLite dispatcher performance improved added the PPI dissector added the syslog dissector added “Bogus IP length” correction with checksum verification disabled new Facebook Chat dissector for the new Facebook chat protocol SIP dissector improved IMAP dissector improved and bugs fixed DNS dissector PIPI improved Yahoo Webmail bugs fixed Live/Hotmail [...]

BackBox and Xplico

Gianluca C. — Mon, 23 Jan 2012 00:29:37 +0000

We are started a collaboration with BackBox team. The first result of this collaboration is a new deb package which can be installed directly from Launchpad. To install Xplico on Ubuntu the steps to follow are: at the end of the file /etc/apt/sources.list add the lines: deb http://ppa.launchpad.net/backbox/two/ubuntu natty main deb-src http://ppa.launchpad.net/backbox/two/ubuntu natty main [...]

Xplico 0.7.1: DEFT Linux 7

Gianluca C. — Sun, 15 Jan 2012 09:50:39 +0000

We are pleased to announce the DEFT Linux 7 and the new release of Xplico. Xplico 0.7.1 fixes some bugs: RTP bug fixed dispatcher core functionality bug fixed mfile manipulator bug fixed XI bugs fixed added DB migration tool We are working to 1.0.0 version and you can try it here. If you are a [...]

CERT Linux Forensics Tools

Gianluca C. — Mon, 12 Dec 2011 00:50:47 +0000

Thanks to Larry Rogers the new release of Xplico can be downloaded from the CERT Linux Forensics Tools Repository. The RPM are available for Fedora 16, 15, 14 and 13. The announcement says: xplico-0.7.1-1.{fc13,fc14,fc15,fc16}.{i386,x86_64}.rpm – xplico is an Internet traffic decoder. See the Xplico website for the list of changes in this version. Note that [...]

Xplico 0.7.0: Gmail and language localization

Gianluca C. — Mon, 07 Nov 2011 00:12:02 +0000

This version introduces improvement on Webmail sniffing/decoding and the language localization. Changelog: upgraded the XI to Cakephp 1.3 added the ICMPv6 dissector Ethernet dissector improved (for ICMPv6) one of two Xplico’s deadlock is solved fixed the communication bug between xplico and the manipulators SDP dissector bug fixed SIP and TCP dissectors improved WebMail manipulator and [...]

Web Demo

Gianluca C. — Mon, 10 Oct 2011 00:32:16 +0000

We are completing the tests on 0.7.0 version. In this release the main features are: Gmail Webmail (HTTP) Yahoo! Mobile Mail (Andorid) AOL WebMail (last version) Language localization The “WebMail sniffer” component (manipulator and python scripts) were improved. All this features and others can be examined and tested with the Web Demo of Xplico. Any [...]

Network Probes and Xplico

Gianluca C. — Mon, 04 Jul 2011 02:10:48 +0000

As many Xplico users know, the Xplico “Live capture” is not the great solution to capture the network traffic. The “Live capture” was introduced only for the purpose of demonstration and it can not be considered a proper mode to capture network data. From 0.6.2 version we have improved the “real time capture” (=> Live [...]