endgame

Packet Capture + Interpretation

endgame is a Python application that captures packets into a pcap file and also interpretes the packets. Currently, endgame is able to

• Identify the type of packet (based on source/destination ports)
• Decode into plain test uncompressed unencrypted packet (e.g. HTML or JS files)
• Dump files that are transferred over unencrypted connections (e.g. HTTP, SMB or FTP)

Motivation

Well we really wanted a nice GUI to visualise network traffic, but specific enough for us to see the actual contents.

Dependencies

Python

• pip3 install -r requirements.txt

Linux

• python3-dev
• tshark