Forum Discussion
Return to Haunted Hollow: PCAP Pandemonium
Hello,
I'm a little confused as to what I'm supposed to be doing by trying to answer question 3?
So I've run the command- sudo /opt/ZIPPY on the terminal - and got to the instructions below.
From what Zippy is alluding too, they want me to go into the - Recycling Bin.pcap, where I have also filtered it to http, as I would have thought the answer may be in the (text/html) packet.
But at the same time I don't really understand what I need to be looking for? A token, but a token for what?
2 Replies
- SamDickison
Community Manager
Hey Dark_Knight666 sorry this took so long, but I've now requested our team to give some support.
- MadelineDadamio
Community Support
Hi Dark_Knight666 I can see how this one gets a little confusing! 🙂 For Task 3, ZIPPY won’t give you that final code until you’ve found all four creature tokens in the different PCAP files. Recycling Bin.pcap only holds the first token, so you won’t see the Task 3 answer in that file.
A quick tip: use Follow TCP Stream in Wireshark to track down the token in each PCAP. Each one will look like monster:food. Once you feed all four back into ZIPPY, it will give you the code you need for Task 3.