More Compiled List of Sample PCAP Files for Practice

A quick follow up from one of my earlier post regarding a compiled list of sample PCAP files, here are more files for your practices on Wireshark features and techniques, of which some of them even have blog posts on the decrypting of the files. I hope they are helpful to you too.

• Honeynet.org’s Scan of the Month PCAPs
  • http://old.honeynet.org/scans/index.html
• Raul Siles, “Pcap files containing a roaming VoIP session”
  • http://www.raulsiles.com/downloads/VoIP_roaming_session.zip
• Russ McRee, W32/Sdbot infected machine
  • http://holisticinfosec.org/toolsmith/files/nov2k6/toolsmith.pcap
• MDSec’s Packets from a GSM 2.5G environment showing uplink/downlink, two MS devices, SIM APDU information
  • https://github.com/HackerFantastic/Public/blob/master/misc/44CON-gsm-uplink-downlink-sim-example.pcap?raw=true
• Joke Snelders, WiFi traffic encrypted with WPA pre-shared key (passphrase “subnet16121930”, SSID “dd-wrt2”)
  • http://www.lovemytool.com/files/test.pcap
  • Decryption instructions: “Wireshark and TShark: Decrypt Sample Capture File“
• Barracuda Labs on the PHP.net Compromise
  • http://barracudalabs.com/downloads/5f810408ddbbd6d349b4be4766f41a37.pcap
  • https://barracudalabs.com/2013/10/php-net-compromise/