Net_Traffic_Analyzer

A professional-grade, asynchronous passive network traffic analyzer and sniffer built with Python 3.12 and Scapy. This tool provides real-time traffic monitoring, Deep Packet Inspection (DPI) at the application level, and detailed bandwidth statistics.

---

Features

• Real-Time Capture: Intercepts packets on any selected network interface (Wi-Fi or Ethernet).
• Asynchronous Architecture: Utilizes multi-threading to ensure packet sniffing continues uninterrupted while statistics are displayed.
• Initial DPI (Deep Packet Inspection): Automatically identifies protocols and detects encryption (e.g., HTTP vs. HTTPS, DNS, QUIC, SSH).
• Traffic Statistics: Tracks cumulative data usage (in bytes/KB/MB) and packet counts for every unique source IP address.
• Logging: Records detailed transaction metadata to a local log file for forensic analysis.
• Clean Architecture: Modular project structure following Senior Engineer best practices.

---

Prerequisites

---

Hardware/OS

• Windows: Requires Npcap installed in "WinPcap API-compatible mode".
• Linux: Requires root privileges (sudo) and libpcap-dev.
• macOS: Requires root privileges.

---

Python Dependencies

Install requirements using pip:

pip install -r requirements.txt

---

Project Structure

net_traffic_analyzer/
├── analyzer/
│   ├── __init__.py        # Package initialization
│   ├── parser.py          # Deep Packet Inspection & OSI Layer analysis
│   ├── sniffer.py         # Network interface interception (Scapy-based)
│   ├── stats_manager.py   # Thread-safe data aggregation & logging
│   └── utils.py           # System permissions & data formatting
├── .env                   # Environment-specific configurations
├── .gitignore             # Git exclusion patterns
├── main.py                # Main execution entry point & UI thread
└── requirements.txt       # Project dependencies and versions

---

Configuration

Create a .env file in the root directory to customize settings:

NETWORK_INTERFACE=       # Leave empty for default interface
LOG_FILE_NAME=traffic.log
STATS_UPDATE_INTERVAL=5
DEBUG_MODE=True

---

Usage

Run the analyzer with administrative privileges:

###Linux / macOS:

sudo python3 main.py

###Windows (Administrator CMD/PowerShell):

python main.py

---

Security Disclaimer

This tool is for educational and authorized security testing purposes only. Unauthorized sniffing of network traffic on networks you do not own or have explicit permission to audit is illegal and unethical.

---

License

This project is licensed under the MIT License.