CloudShark
Security and privacy
packet capture analysis
SHOW HN2012
164points
31comments
#112of 1,677 in 2012
Top 7%of 2012 by points
How HN took it
DebatedReal support and real criticism
5 positive, 4 neutral or asking, 2 mixed, 9 critical, out of 20 comments about the project. Thread score -0.08.
Idea: 1 for, 5 againstDesign: 3 for, 2 againstPrivacy: 0 for, 2 againstExecution: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Clean, well-designed web UI
From 2 comments
This looks extraordinarily well done. What are you planning on doing with it? I can think of a lot of different use cases. ("How well does it integrate with ArcSight"? Sheesh.)
tptacek on HNLove the UI! I particularly like how intuitive the range slider is at the top. I see that it's the standard jQuery UI Slider control... how is the chart being generated? I can…
xpotential on HN
Bandwidth over time visualization is useful
From 1 comment
The bandwidth over time visualization is what makes this most valuable to me vs. normal wireshark. It made debugging the differences between two different "internet speed test"…
mkjones on HN
Objections
Uploading captures to a third party is a privacy and security risk
From 4 comments
As a network forensic investigator, if I were to upload packet captures to a third-party, I'd almost certainly lose my job - and rightfully so. Now, the appliance looks…
kylemaxwell on HNIt'd be better if this were open-source, uploading pcaps on a 3rd-party site is pretty scary...
longlho on HNNice web-based UI for capture files, BUT: They need a Security story other than "run it on an appliance inside your network." I would also appreciate a single page (unless I…
feralchimp on HNThe bandwidth over time visualization is what makes this most valuable to me vs. normal wireshark. It made debugging the differences between two different "internet speed test"…
mkjones on HN
Not open source
From 2 comments
I could see a large number of possibilities: remotely debugging network issues, collaboratively reversing a protocol, collaborative forensic analysis, etc. The ability to make…
daeken on HNIt'd be better if this were open-source, uploading pcaps on a 3rd-party site is pretty scary...
longlho on HN
Unclear what it adds beyond local Wireshark
From 2 comments
Why would I want this? When I'm doing protocol analysis I'm usually doing packet capture at the same time, which a web app can't do for me since it's not in my lan. I've never…
rabidsnail on HNEven than, why on earth I should skip my own copy of WireShark and use CloudShark?
fsniper on HN
Requests
Provide a security story beyond an on-premise appliance
From 1 comment
Nice web-based UI for capture files, BUT: They need a Security story other than "run it on an appliance inside your network." I would also appreciate a single page (unless I…
feralchimp on HN
Open-source the project
From 2 comments
I could see a large number of possibilities: remotely debugging network issues, collaboratively reversing a protocol, collaborative forensic analysis, etc. The ability to make…
daeken on HNIt'd be better if this were open-source, uploading pcaps on a 3rd-party site is pretty scary...
longlho on HN
Provide a demo dataset
From 1 comment
The bandwidth over time visualization is what makes this most valuable to me vs. normal wireshark. It made debugging the differences between two different "internet speed test"…
mkjones on HN
Questions
How does it integrate with SIEMs like ArcSight?
From 1 comment
As a network forensic investigator, if I were to upload packet captures to a third-party, I'd almost certainly lose my job - and rightfully so. Now, the appliance looks…
kylemaxwell on HN
Can it handle 10-gig networks and extend storage?
From 1 comment
As a network forensic investigator, if I were to upload packet captures to a third-party, I'd almost certainly lose my job - and rightfully so. Now, the appliance looks…
kylemaxwell on HN
How is the chart generated?
From 1 comment
Love the UI! I particularly like how intuitive the range slider is at the top. I see that it's the standard jQuery UI Slider control... how is the chart being generated? I can…
xpotential on HN
Alternatives named
Wireshark
From 2 comments
Even than, why on earth I should skip my own copy of WireShark and use CloudShark?
fsniper on HNI assume you aren't on OS X where Wireshark is fugly, clunky, and takes forever to boot.
sant0sk1 on HN
pcapr.net
From 1 comment
For those interested in this type of app, there is also pcapr.net (for example…
jusob on HN
Fiddler
From 1 comment
would an interesting concept to replace fiddler for http analysis if it captured packets
EToS on HN
tcpflow and mitmproxy
From 1 comment
Wireshark is too low level unless you are doing hardcore network experiments. Most of the time I found out tcpflow or mitmproxy is more than enough, of coz YMMV.
tszming on HN