Create this new directory with the command: Now we need to create a new directory to house the contents of the ZQ package. If you find unzip not installed, install it with the command: When that download completes, unpack the file with the command: When the download completes, open a terminal window and change into the Downloads directory with the command:īack at the Brim download page, download the ZQ (pronounced “zeek”) package and save it to the ~/Downloads directory. Head over to the Brim download page and download the. The first thing we’re going to do is install the Brim package. SEE: Incident response policy (TechRepublic Premium) What you’ll needĪ running instance of Ubuntu Desktop (you can also install this on Red Hat-based distributions, macOS, or Windows) Let’s install Brim on Ubuntu Desktop 20.04. Brim transforms PCAP files into Zeek logs (in the ZNG format) so you can easily search those logs and drill down into those packages to get even more information than you thought possible.īrim is free and available for Linux, macOS, and Windows. Brim can help prevent you from getting lost in a sea of networking packets. If network packet capture and analysis is your jam, you’re going to want to use Brim. Brim is a GUI tool with the single purpose of viewing Wireshark PCAP files. To make things worse, drilling down into a packet on Wireshark isn’t terribly intuitive. Given the nature of the beast, no admin wants to have to deal with such a problem.

When those packet capture files get large (which they easily can), Wireshark gets laggy.

Wireshark then allows you to filter through that traffic to find exactly what you’re looking for.įor some admins, Wireshark has one glaring flaw–it doesn’t handle large capture files with much grace.

Even better, you can have Wireshark save those captured packets for later viewing. With this open source GUI network package capturing tool, you can monitor your network traffic and sniff out problems. How to configure networking on a Linux server (TechRepublic Premium)įor many network admins, Wireshark is the de facto standard for checking in on the health and security of networks. How industrial IoT is forcing IT to rethink networks Get instant malware filtering with Gryphon Guardian NVIDIA unveils supercomputing and edge products at SC22

Pcap analysis tools