sniffnet 1.0.0

Application to comfortably monitor your network traffic
sniffnet-1.0.0 is not a library.

Install and Run

If you have Rust installed on your machine, the application binary can be installed with:

cargo install sniffnet

Otherwise, you can install Sniffnet through the installers available in the latest release.

In order to correctly run Sniffnet on Windows systems you need to:

  • Install Npcap.

  • Download the Npcap SDK.

  • Add the SDK's /Lib or /Lib/x64 folder to your LIB environment variable.

In order to correctly run Sniffnet on Linux systems, install the libraries and header files for the libpcap library:

sudo apt-get install libpcap-dev

Note that if you are not running as root, you need to set capabilities to inspect a network adapter:

sudo setcap cap_net_raw,cap_net_admin=eip <your/Sniffnet/executable/path>

MacOS natively has all the dependencies you need to build and run Sniffnet!

Features

  • choose a network adapter to inspect
  • select filters to apply to the observed traffic
  • view real-time charts about traffic intensity (bytes and packets per second, incoming and outgoing)
  • view overall statistics about the filtered traffic
  • view most relevant connections (most recent, most packets, most bytes)
  • save complete textual report with detailed information for each connection:
    • source and destination IP addresses
    • source and destination ports
    • carried protocols
    • amount of exchanged packets and bytes
    • initial and final timestamp of information exchange

Supported application layer protocols

Please, note that application layer protocols are just inferred from the transport port numbers.

Port number(s) Application protocol Description
20, 21 FTP File Transfer Protocol
22 SSH Secure Shell
23 Telnet Telnet
25 SMTP Simple Mail Transfer Protocol
49 TACACS Terminal Access Controller Access-Control System
53 DNS Domain Name System
67, 68 DHCP Dynamic Host Configuration Protocol
69 TFTP Trivial File Transfer Protocol
80, 8080 HTTP Hypertext Transfer Protocol
109, 110 POP Post Office Protocol
123 NTP Network Time Protocol
137, 138, 139 NetBIOS NetBIOS
143, 220 IMAP Internet Message Access Protocol
161, 162, 199 SNMP Simple Network Management Protocol
179 BGP Border Gateway Protocol
389 LDAP Lightweight Directory Access Protocol
443 HTTPS Hypertext Transfer Protocol over SSL/TLS
636 LDAPS Lightweight Directory Access Protocol over TLS/SSL
989, 990 FTPS File Transfer Protocol over TLS/SSL
993 IMAPS Internet Message Access Protocol over TLS/SSL
995 POP3S Post Office Protocol 3 over TLS/SSL
1900 SSDP Simple Service Discovery Protocol
5222 XMPP Extensible Messaging and Presence Protocol
5353 mDNS Multicast DNS

Troubleshooting

Missing dependencies

Most of the errors that can occur are likely due to your system missing required pcap dependencies, necessary to correctly analyze a network adapter.

Check the Install and Run section for instructions on how to proceed.

For a Windows reference, you can check issue #1.

Installers incompatibilities

If you have problems after having installed Sniffnet through the provided installers, it could be due to your OS not being compatible with the pre-built binaries I generated for you.

Reach me out, and I'll try to generate an installer for your specific operating system.

In any case don't hesitate to open an issue, and I will do my best to help you!

Contribute

Do you want to improve Sniffnet? Check here

Stargazers