David Spurlock
RésuméContact
Menu

Technical project· Network analysis

Network Packet Analysis

A deterministic packet-analysis project that generates synthetic PCAPs and turns them into evidence-linked JSON, Markdown, and standalone HTML reports.

This page documents a later portfolio reconstruction of a project originally completed during the ASU Cybersecurity Boot Camp in 2020. The current code, data, screenshots, and reports are not the untouched original submission.

ASU Cybersecurity Boot Camp · 2020Reviewed July 2026
← Back to all projects
Network packet analysis report showing a synthetic capture summary and traffic charts.
The packet report keeps observations tied to supporting frame numbers in a synthetic capture.
For
Recruiters and technical reviewers evaluating packet-analysis workflow, evidence traceability, and portable reporting.
Role
Original bootcamp project work; later fixture design, packet analysis, reporting, visualization, and verification
Build
Later portfolio reconstruction of an original bootcamp project

The problem

Why this needed to exist.

Network findings are easy to overstate when a conclusion is separated from the packets that support it. This lab keeps every extracted observation and event linked to its source frame numbers.

Defining decision

Keep every extracted observation and documented event linked to source frame numbers rather than presenting conclusions without packet evidence.

Approach

How the system was shaped.

  1. Generated fixed captures with documentation-range addresses and synthetic MAC addresses.
  2. Normalized protocols, endpoints, conversations, DNS, ARP, HTTP, and documented events into a stable data model.
  3. Embedded charts and report styling so the HTML case review remains portable and offline-readable.

Tradeoffs

What the design chooses—and gives up.

  • Simple transparent rules are easy to audit but are not a replacement for a production IDS.
  • The fixtures favor reproducibility and teaching value over large-volume capture realism.

Evidence

What can be inspected.

  • The combined sample contains twenty-six packets and three documented event patterns.
  • Every extracted item records a one-based packet number for evidence traceability.

Lessons

What carries into the next system.

  • Packet-analysis conclusions are easier to review when every observation retains its source-frame reference.