1

Is such type of question acceptable here? Idk, I am looking for anything like requests from LAN through my computer's vpn to anything unusual like torrent clients, games sites/servers various video sites (except youtube). And so on. Maybe a hidden VPN traffic inside my vpn. Anything like remote desktops.

5
  • you should give it a try and ask a specific question if you have any doubt about what you think can be wrong in your log file.
    – Shaboti
    Jun 22 '20 at 11:21
  • Is it possible to find any backdoor/rootkit by using wireshark without knowing anything. How hard will it be for a person without knowledge? Jun 22 '20 at 11:24
  • Windows 8.1. LAN, VPN Jun 22 '20 at 11:25
  • Is it possible that automatic online analyzer exists? Jun 22 '20 at 11:25
  • 2
    A question which would just provide logs or packet captures and ask for a generic analysis (i.e. anything suspicious there) would likely be closed as lacking focus. Jun 22 '20 at 11:39
5

We are not a code/site/log/packet dump analysis site. As you can imagine, we'd be flooded with random stuff to wade through.

5

Depends on the question. In general, I would say:

  • "Here's a traffic dump. Notice anything strange?" Will be closed as "needs focus".
  • "Here's some relevant subset of trafic. I suspect X. Is that correct?" Probably OK question!
  • "Here's some small subset of trafic that I don't understand. I expected X but got Y. What is going on here?" Probably OK as long as there is a security angle to it.

The key is that you need to focus on something specific, and not just a big dump of traffic. The goal is for questions here to be useful for more than just the person asking them. Since your traffic is unique to you nobody else will benefit from a general analysis.

If your goal is "to find any backdoor/rootkit by using wireshark without knowing anything" it is not specific enough to ask here, I'm afraid.

0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .