RomanNum3ral
/
Cybersecurity-Projects
mirror of https://github.com/CarterPerez-dev/Cybersecurity-Projects.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Cybersecurity-Projects/PROJECTS/beginner/network-traffic-analyzer/cpp/README.md

2.4 KiB
Raw Blame History 

▄▄▄▄▄▄ ▄▄▄▄   ▄▄▄  ▄▄▄▄▄ ▄▄▄▄▄ ▄▄  ▄▄▄▄    ▄▄▄  ▄▄  ▄▄  ▄▄▄  ▄▄  ▄▄ ▄▄ ▄▄▄▄▄ ▄▄▄▄▄ ▄▄▄▄  
  ██   ██▄█▄ ██▀██ ██▄▄  ██▄▄  ██ ██▀▀▀   ██▀██ ███▄██ ██▀██ ██  ▀███▀   ▄█▀ ██▄▄  ██▄█▄ 
  ██   ██ ██ ██▀██ ██    ██    ██ ▀████   ██▀██ ██ ▀██ ██▀██ ██▄▄▄ █   ▄██▄▄ ██▄▄▄ ██ ██

A high-performance CLI network analyzer built with libpcap for raw packet capture and FTXUI for a fully interactive terminal UI. The application captures packets directly from a network interface, parses protocol headers manually, aggregates statistics in real time

Preview

[!IMPORTANT] Packet capture requires elevated privileges.

Run with:

sudo ./network-traffic-analyzer

Or grant capabilities:

sudo setcap cap_net_raw,cap_net_admin=eip ./network-traffic-analyzer

Features

  1. Live Packet Capture

  • Capture traffic from a selected network interface
  • Support for BPF filters (e.g. tcp, port 80, udp)
  • Real-time processing using libpcap

  1. Real-Time Statistics Engine

  • Total packets & traffic volume
  • Transport protocol distribution (TCP / UDP / ICMP)
  • Application-level classification (port-based)
  • Top IP addresses
  • Top source > destination pairs

  1. Flexible Capture Modes

  • Live capture from selected network interface (-i, --interface)
  • Offline analysis from .pcap file (-r, --offline)
  • Packet count limit (-c)
  • Time limit for capture (-t)
  • Interface discovery (--interfaces)

[!TIP] For the complete list of CLI options, use: --help

Technologies

  • C++20+
  • Boost::program_options
  • libpcap
  • FTXUI
  • CMake

Build

mkdir build && cd build
cmake ..
make

Usage Example

Live capture on eth0

sudo ./network-traffic-analyzer -i eth0

Capture 100 packets

sudo ./network-traffic-analyzer -i wlan0 -c 100

Analyze offline pcap file

sudo ./network-traffic-analyzer --offline traffic.pcap

Export results (json / csv)

sudo ./network-traffic-analyzer --json result.json --csv result.csv