Xplico

This version of Xplico and especially of Xplico Interface (web user interface) introduce many new features.
Xplico :

• dissectors: Ethernet, pcap, ipv4, ipv6, ppp, sll, tcp (2 type), udp, dns, ftp, http,  icmp, imap, ipp, mms, pjl (Printer Job Language), pop, sdp, smtp, tftp, l2tp (instable), vlan (instable)
• reverse dns using only the DNS traffic in the PCAP file
• geographical and temporal map of the connections decoded (The local IP are mapped in Venezia)
• improvements of the regeneration of web pages.

Xplico Interface:

• new look (screenshot)
• summary of the data decoded
• source host selectablly
• visualization (with Wireshark) of all packets and flows that compose the content extracted/reconstructed
• usable from any PC on the network (see install)
• improvements email visualization, (downloadable attachments)
• feed list. Feed reader (RSS and Atom)
• MMS contents visualization
• improvement of research content
• improvements of the regeneration of web pages

By March there will be a new release of  Xplico. This new release will have the geographical map of the reconstructions, and (perhaps) the dissector for Multimedia Messaging Service.
An example of geographical map can be found here.

This release introduce the IMAP dissector. With this dissector it is possible reconstruct the e.mails transported by IMAP protocol. The web interface it is the same of last version.

Any bug reports or suggestions are welcome.

You can find source code here.

Completed IPP (Internet Printing Protocol) and PJL (Printer Job Language) dissectors. These dissectors convert the traffic network printers in pdf file format. Thanks to MT-Lab for the idea.
This pdf file is an example of reconstruciton (from Wireshark ipp.pcap).