pt_similar: Get a similarity graph relative to the current PCAP file.
In hrbrmstr/packettotal: Lookup and Analyze Packet Capture ('PCAP') Files

Description Usage Arguments References Examples

Results contain PCAPs that exhibit similar behaviors or contain similar content. Results are organized with the most similar PCAPs on top, and the terms that were found shared within both.

1
2
3

pt_similar(pcap_id, weighting_mode = c("behavior", "content"),
  intensity = c("minimal", "low", "medium", "high"),
  prioritize_uncommon_fields = FALSE, api_key = packettotal_api_key())

`pcap_id`	An md5 hash corresponding to the PCAP file submission on PacketTotal.com. This hash can be derived by hashing the PCAP file in question.
`weighting_mode`	One of "`behavior`" (default) or "`content`". Weight search results either based on their similarity to the behaviors exhibited or contents contained within the current PCAP file.
`intensity`	One of "`minimal`" (default), "`low`", "`medium`", or "`high`". The scope of the search, basically translates to the maximum number of aggregations to exhaust. Using a high level intensity, may result in occassional timeouts.
`prioritize_uncommon_fields`	By default, the most common values are used to seed the initial similarity search. Enabling this parameter, seeds the initial search with the least common values instead.
`api_key`	your `packettotal_api_key()`.