Skip to content

Glossary: Logs and Data Sources for Investigations

Packet capture

Also written: capture, pcap, pcap file

A full copy of the packets that crossed a link, including headers and payload, saved as a pcap file. It was the only source that showed what was in the upload: Kettle & Crane's customer list.

Where the book teaches it

Related terms

PayloadtcpdumptsharkWiresharkFlow record