PCAP Quick Profiler — Report
Generated: 2025-11-12 16:18:30 UTC

File: C:\Users\brand\Desktop\Projects\security-tools\tools\Pcap-profiler\samples\demo_small.pcap
Window: ? → ? · Duration: 0.00s · Packets: 250 · Bytes: 198,152

Top Source IPs
count
10.10.0.2099
104.80.224.5763
20.190.160.13222
108.167.165.24921
8.8.8.814
52.109.12.188
13.107.42.167
52.109.76.684
104.110.191.1773
51.105.71.1363
Top Destination IPs
count
10.10.0.20151
20.190.160.13230
104.80.224.5715
108.167.165.24915
8.8.8.814
52.109.12.186
51.105.71.1364
52.109.76.683
13.107.42.163
104.110.191.1773
Top Destination Ports
count
44376
5619020
5622815
5623015
5314
5622913
5618511
809
560547
561817
TLS SNI
(none)
TLS JA3
(none)
Protocols
TLS198
DNS28
HTTP12
TCP.SEGMENTS6
OCSP5
CERTIFICATE REVOCATION LIST1
🚨 Beaconing suspects experimental
DestinationSNIHitsAvg Interval (s)Score
(none)
Score is based on periodicity (lower inter-arrival variance → higher score).
HTTP Hosts
ctldl.windowsupdate.com2
ocsp.digicert.com2
crl.identrust.com1
x1.c.lencr.org1
r3.o.lencr.org3
HTTP User-Agents
Microsoft-CryptoAPI/10.09
HTTP URLs
(none)