Analyze PCAP API & Open-source SDK

We have talked about an analysis API since PacketTotal started over two years ago, and today we are incredibly excited to announce we now support submissions through our REST API.

Currently, you can analyze .pcap/pcapng files up to 6MB, and they must first be encoded to base64. These limits will likely be raised as we scale our infrastructure and data-model.

If REST APIs aren't your thing, you can also use the open-source SDK.

SDK Analyze Implementation

Researchers can also leverage the packettotal command-line utility that comes packaged with the SDK.

We are hoping that this added functionality will increase the usefulness of the tool, and open up exciting integration opportunities!