When one RTP stream is selected, a mono audio file is produced. This is done from the 'RTP Stream Analysis' dialog by pressing the 'Save' button and select one of '… Audio' options, then select 'Sun Audio' file format.

You can save the content of an RTP audio stream to an Au-file directly from Wireshark. The entire process can be done by using two tools:īruteShark - A network forensics analysis tool capable of analyzing pcap capture files(.pcap), one of it’s capabilities is exporting the network connections occurred between hosts to json format that can be loaded into Neo4J.RTP statistics Saving RTP audio streams Supported codecs with 8000 Hz sample rate One way of network analysis is by visualizing and represent the network map as a graph, visualizing data can be more convenient to an analyst to work with and, by incorporating this representation we can also apply algorithms and techniques from graph theory mathematics for further analysis. Network map data can include a lot of information about the hosts and connections, such as open ports, hosts operating systems and more, the basic information is the network topology, or: “which host connects to another”.Īll these tools and different techniques and approaches simplify the process of gathering the network data, but the process of analysis and getting the information is more difficult and can be done in many ways. as a penetration tester you don’t want to actively scan the network and maybe expose your presence and compromise the test, and sometimes, as an analyst or an incident response team member the only thing you get is a network capture file(.pcap). There are plenty of tools and techniques that can help you gather this network map data, tools that work passively can gather this data form a network capture file(.pcap) such as “Wireshark” and more, there are also tools such as “Nmap” that can actively scan the network and can provide us real-time information, each method and it’s own pros and cons, sometimes, i.e. When analyzing a network, one of the first steps we would do is to find the endpoints, all the hosts in the network and their connections, in order to create a network map, after we gathered the data it’s time to analyze it and get some insights. Whether you’re a penetration tester or a red team member doing a vulnerability tests, or whether you’re a cyber analyst or an incident response team member responding to an event, you are familiar with the process of analyzing a network.

Wireshark graph analysis