Geolocation-Based Source Tracking for Threat Identification on Telegram

Abstract

With the increasing popularity of instant messaging platforms like Telegram, the need for efficient and reliable call source tracking has become crucial in various domains, including law enforcement, cybersecurity, and intelligence gathering. This project focuses on utilizing Wireshark, a powerful network packet analysis tool, to capture and analyze network traffic in order to track the source of Telegram calls. The foundational stage involves setting up Wireshark to intercept packets traversing through network interfaces, capturing both incoming and outgoing data exchanges to create a comprehensive record of network activity. Subsequently, specific packets of interest are isolated through meticulous filtering processes within Wireshark. Once these packets are extracted, the project shifts towards location identification by analyzing the content within them, including IP addresses. By leveraging Wireshark's detailed protocol dissections, the project aims to derive location-specific data associated with the captured Telegram call activities, facilitating source tracking and enhancing network security measures.