Cybersecurity-Projects/PROJECTS/beginner/network-traffic-analyzer/python/README.md

███╗   ██╗███████╗████████╗ █████╗ ███╗   ██╗ █████╗ ██╗
████╗  ██║██╔════╝╚══██╔══╝██╔══██╗████╗  ██║██╔══██╗██║
██╔██╗ ██║█████╗     ██║   ███████║██╔██╗ ██║███████║██║
██║╚██╗██║██╔══╝     ██║   ██╔══██║██║╚██╗██║██╔══██║██║
██║ ╚████║███████╗   ██║   ██║  ██║██║ ╚████║██║  ██║███████╗
╚═╝  ╚═══╝╚══════╝   ╚═╝   ╚═╝  ╚═╝╚═╝  ╚═══╝╚═╝  ╚═╝╚══════╝

Network traffic capture and analysis CLI with protocol distribution, top talkers, and bandwidth visualization.

This is a quick overview — security theory, architecture, and full walkthroughs are in the learn modules.

What It Does

• Capture live network traffic on any interface with configurable packet counts
• Real-time protocol distribution analysis with percentage breakdowns
• Top talkers identification showing most active IP addresses by traffic volume
• Bandwidth calculation with bytes sent/received per endpoint
• Verbose mode displays individual packet flow with source/destination details
• Built on Scapy for deep packet inspection and protocol parsing

Quick Start

uv tool install netanal
sudo netanal capture -i eth0 -c 100

[!TIP] This project uses just as a command runner. Type just to see all available commands.

Install: curl -sSf https://just.systems/install.sh | bash -s -- --to ~/.local/bin

Commands

Command	Description
netanal capture	Live packet capture with protocol analysis, top talkers, and bandwidth stats

Learn

This project includes step-by-step learning materials covering security theory, architecture, and implementation.

Module	Topic
00 - Overview	Prerequisites and quick start
01 - Concepts	Security theory and real-world breaches
02 - Architecture	System design and data flow
03 - Implementation	Code walkthrough
04 - Challenges	Extension ideas and exercises

License

AGPL 3.0