Sniffler

Simple Python-based packet sniffer, complete with a GUI interface for easy viewing and analysis.

Progress

• Basic operation
  • Protocol based packet filters for display
• Command line integration (TBD)
• Add support for more protocols (TBD)
• Modularise CLI to allow for GUI integration with same modules
• GUI
  • UI
  • Actions
    • Table population
    • Pre-population filtering
    • Analysis (packet counts, maybe more?)
    • Status handling

Requirements

• python3
• argparse module, install from pip as:

  pip3 install argparse

Usage

CLI

Run CLI application as administrator as:

sudo python3 sniffler.py

Options

• For filtering by protocol, use -p or --proto option followed by protocol list
• For filtering by source address, use -sa or --srcaddr option followed by source address
• For filtering by source address, use -da or --dstaddr option followed by destination address
• For filtering by source address, use -sp or --srcport option followed by source port
• For filtering by source address, use -dp or --dstport option followed by destination port

GUI

Run GUI application as administrator as:

sudo python3 gsniffler.py

Example usage

• All packets

  sudo python3 sniffler.py

• Filter only tcp segments

  sudo python3 sniffler.py -p tcp

• Filter ethernet frame info and tcp segments

  sudo python3 sniffler.py --proto tcp eth

• Filter TCP segments from port 443

  sudo python3 sniffler.py -p tcp --srcport 443

• Help

  sudo python3 sniffler.py --help

• GUI

  sudo python3 gsniffler.py

Protocols supported

• TCP segments (IPv4) - tcp
• Ethernet frames - eth
• UDP segments (IPv4) - udp
• ICMP - icmp