How to find human activity when analyzing the captured packages?
Except for the HTTP connections, how to find other human activity based on packages using the UDP(SSDP, DNS, DHCP,MDNS),TCP(TLS),ARP protocols?
Presumably this is a homework question? What have you ttried?