How to derive inode In|S1683/1684|H2401:314|G1|webmail
IO Subsys n:
case
dfrws
iosource
n
subsys
Standard
CWD
/
interactive
True
filename
vfs://dfrws/raw_filesystem/response_data/suspect.pcap
Stream In|S1683/1684
Packet ID
Offset
Length
1991
955506
1514
1992
957036
403
1995
957595
359
1997
958040
655
HTTP
Extract 314 bytes from In|S1683/1684 starting at byte 2401
Gzip File
Use Gzip algorithm to decompress In|S1683/1684|H2401:314
Web App
Analyse Gmail transaction