Skip to content

Latest commit

 

History

History
54 lines (28 loc) · 1.35 KB

README.md

File metadata and controls

54 lines (28 loc) · 1.35 KB
Raw

netdiscoviz

Tool to discover and visualize networks

The current version get logs from iptables and generate js file to use with vis.js.

To use it, just run :


   git clone --recurse https://github.com/fccagou/netdiscoviz
   cd netdiscoviz
   cat tests/input-ipt.log | python ./iptables2visjs.py > data/net.js
   firefox ./index.html

You must get a graphe looking like this .

Sample graphe

The picture below is from @IvreRocks using bro capture on 3 sources in the same network.

Sample ivre flow graphe

And how about making an iptables logs parser to @IvreRocks flow?
Ivre's team was ok and I've done it. It's now merged.

Here is the graph with the same input file then the first picture.

Ivre flow using iptables parser

Just for fun, use ivre flowcli to generate graph :P

    ivre flowcli -s ' ' \
       | awk '{ print  "IN=ivre SRC="$1" DST="$3" SPT= PROTO="$2 }'\
       | sed 's#/# DPT=#' \
       | ./iptables2vis.py > data/net.js

    xdg-open index.html