Source Code

Xplico use source code, libraries, database and applications of other projects, some of those are inside Xplico code but other no, therefore to build Xplico (system) with all features it is necessary download (compile/install) these software:

The optionals software are necessary if you want the geographical and temporal visualizations of connections (GeoIP C API & GeoLite City), or if you want reconstruct document printed with network printer (GhostPCL), or if you want decode VoIP call (FFmpeg, MPlayer).

Dependencies

Xplico code depend of these libraries:

  • Pcap Library: libpcap
  • SQLite Library: libsqlite2 and libsqlite3
  • MySQL C API Library: libmysqlclient_r
  • Zlib: zlib1g-dev

Building it

In this section we describe the steps to compile and install (if you want) Xplico. Some steps are optionals and depends of the features that you decide to use.

  1. First extract the tarball:
    tar -xzvf xplico-xxxx.tgz
  2. If you want (not necessary) that Xplico produces the geographical map of the reconstruction, then you must download GeoIP-x.x.x.tar.gz, and from the SAME directory where you unpack xplico you have to unpack GeoIP source code. After that you have to configure and compile GeoIP:
    cd GeoIP-x.x.x
    ./configure
    make

    No need to install GeoIP.
    At the end, download and unpack in the directory xplico the GeoLite City database. Remember to unpack the file (db).

  3. Run make in the Xplico distribution directory. Hopefully, you won’t run into any problems.
  4. After running make, you will see xplico binary and modules directory.
  5. If you wish (not necessary) to decode network printer job, make sure you have Ghostpcl. Compile Ghostpcl without install it. Copy 'pcl6' application in Xplico home directory (in the same directory of xplico binary).
  6. Run ‘./xplico’ and make sure that everything are working. Note that you must have root privileges in order to capture live data!
  7. At this point you can use Xplico in Console Mode.
  8. If you use Xplico Interface then run the following commands:
    make install
  9. The steps to install Xplico Interface are here.
  10. With root permission run:
    /opt/xplico/script/sqlite_demo.sh
1) , 2) necessary to enable geographical and temporal visualizations
3) necessary to decode printer job of network printers
4) , 5) necessary to decode VoIP call
 
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Noncommercial-Share Alike 4.0 International
Recent changes RSS feed Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki