<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Cisco Blog &#187; conficker</title>
	<atom:link href="http://blogs.cisco.com/tag/conficker/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.cisco.com</link>
	<description></description>
	<lastBuildDate>Wed, 19 Jun 2013 15:21:25 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>Finding A Needle In A PCAP</title>
		<link>http://blogs.cisco.com/security/finding-a-needle-in-a-pcap/</link>
		<comments>http://blogs.cisco.com/security/finding-a-needle-in-a-pcap/#comments</comments>
		<pubDate>Thu, 13 Aug 2009 21:16:38 +0000</pubDate>
		<dc:creator>Shiva Persaud</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[conficker]]></category>
		<category><![CDATA[emerging threats]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[security research]]></category>
		<category><![CDATA[tshark]]></category>
		<category><![CDATA[wireshark]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=12901</guid>
		<description><![CDATA[When news of Conficker surfaced I obtained a traffic sample from our botnet honeynet. I wanted to see what relevant aggregate information I could extract and see if there was any specific indication of Conficker activity. Using some lightweight tools I was able to quickly analyze my traffic sample and focus further research.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/finding-a-needle-in-a-pcap/feed/</wfw:commentRss>
		<slash:comments>11</slash:comments>
		</item>
	</channel>
</rss>
