{"id":5483,"date":"2026-04-18T21:11:57","date_gmt":"2026-04-18T21:11:57","guid":{"rendered":"https:\/\/172-234-197-23.ip.linodeusercontent.com\/?page_id=5483"},"modified":"2026-04-18T21:11:57","modified_gmt":"2026-04-18T21:11:57","slug":"scythe-ea642fc0","status":"publish","type":"page","link":"https:\/\/neurosphere-2.tail52f848.ts.net\/wordpress\/?page_id=5483","title":{"rendered":"scythe-ea642fc0"},"content":{"rendered":"\n

Today is April 18, 2026 | Ben Gilbert | Texas City | 4:08pm CST<\/p>\n\n\n\n

This Packet Capture is from March 25 2026 on the hour every hour Cron Job at Linode Chicago : tcpdump -i eth0 -s 0 -w \/tmp\/capture.pcap ‘ip or ip6’ -G 60 -W 1
tcpdump: listening on eth0, link-type EN10MB (Ethernet)<\/p>\n\n\n\n

This is the oldest I have not processed yet, considerate a random sample. I can’t be bothered to look at everything!<\/p>\n\n\n\n

Offline SCYTHE_HYPERGRAPH Bundle<\/p>\n\n\n\n

session-hypergraph-SESSION-e12db364<\/a>Download<\/a><\/div>\n\n\n\n
\"\"<\/figure>\n\n\n\n

\u2705 Ingested 10 PCAPs \u2192 1832 sessions, 8443 nodes, 21716 edges<\/p>\n\n\n\n

10<\/strong> PCAPs \u2022 1832<\/strong> sessions \u2022 908<\/strong> hosts \u2022 908<\/strong> \ud83c\udf0d geolocated (Recon Entities)<\/p>\n\n\n\n

\u25b6 \ud83d\udcc4 capture_20260325150001.pcap<\/p>\n\n\n\n

22.7 KB \u2022 22 sessions \u2022 ICMP:13 TCP:7 UDP:2<\/p>\n\n\n\n

\u25b6 \ud83d\udcc4 capture_20260325160001.pcap<\/p>\n\n\n\n

20.2 KB \u2022 34 sessions \u2022 TCP:6 UDP:2 ICMP:26<\/p>\n\n\n\n

\u25b6 \ud83d\udcc4 capture_20260325170001.pcap<\/p>\n\n\n\n

16.2 KB \u2022 15 sessions \u2022 UDP:2 ICMP:8 TCP:5<\/p>\n\n\n\n

\u25b6 \ud83d\udcc4 capture_20260325180001.pcap<\/p>\n\n\n\n

19.6 KB \u2022 28 sessions \u2022 ICMP:21 TCP:5 UDP:2<\/p>\n\n\n\n

\u25b6 \ud83d\udcc4 capture_20260325190001.pcap<\/p>\n\n\n\n

12.8 KB \u2022 27 sessions \u2022 ICMP:19 TCP:6 UDP:2<\/p>\n\n\n\n

\u25b6 \ud83d\udcc4 capture_20260325200001.pcap<\/p>\n\n\n\n

69.4 KB \u2022 71 sessions \u2022 TCP:56 ICMP:13 UDP:2<\/p>\n\n\n\n

\u25b6 \ud83d\udcc4 capture_20260325210001.pcap<\/p>\n\n\n\n

268.5 KB \u2022 557 sessions \u2022 TCP:540 UDP:2 ICMP:15<\/p>\n\n\n\n

\u25b6 \ud83d\udcc4 capture_20260325220001.pcap<\/p>\n\n\n\n

193.7 KB \u2022 541 sessions \u2022 TCP:524 ICMP:15 UDP:2<\/p>\n\n\n\n

\u25b6 \ud83d\udcc4 capture_20260325230001.pcap<\/p>\n\n\n\n

190.2 KB \u2022 521 sessions \u2022 TCP:508 ICMP:10 UDP:3<\/p>\n\n\n\n

\u25b6 \ud83d\udcc4 capture_20260326010001.pcap<\/p>\n\n\n\n

4.7 KB \u2022 16 sessions \u2022 ICMP:13 UDP:2 TCP:1<\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Today is April 18, 2026 | Ben Gilbert | Texas City | 4:08pm CST This Packet Capture is from March 25 2026 on the hour every hour Cron Job at Linode Chicago : tcpdump -i eth0 -s 0 -w \/tmp\/capture.pcap ‘ip or ip6’ -G 60 -W 1tcpdump: listening on eth0, link-type EN10MB (Ethernet) This is… <\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"class_list":["post-5483","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/neurosphere-2.tail52f848.ts.net\/wordpress\/index.php?rest_route=\/wp\/v2\/pages\/5483","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/neurosphere-2.tail52f848.ts.net\/wordpress\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/neurosphere-2.tail52f848.ts.net\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/neurosphere-2.tail52f848.ts.net\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/neurosphere-2.tail52f848.ts.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5483"}],"version-history":[{"count":0,"href":"https:\/\/neurosphere-2.tail52f848.ts.net\/wordpress\/index.php?rest_route=\/wp\/v2\/pages\/5483\/revisions"}],"wp:attachment":[{"href":"https:\/\/neurosphere-2.tail52f848.ts.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5483"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}