Network Traffic Analyzer 🔎

Python-based Network Traffic Analyzer designed to automate the initial triage of raw packet capture (PCAP) files. Leveraging the analytical power of scapy, this tool rapidly transforms bulk network data into actionable security intelligence. It addresses the critical need for fast, objective analysis of network reconnaissance, malicious application-layer activity, and data exfiltration indicators, making it an essential asset for security operations workflows.

Features Overview :

Capability	Purpose	Implementation
PCAP Parsing	Network traffic analysis and forensics	Scapy rdpcap()
Port Scan Detection	Early attack reconnaissance identification	SYN tracking with thresholds
HTTP Security	Web application attack detection	Suspicious path matching
DNS Monitoring	Data exfiltration and tunneling detection	Query length analysis
Traffic Analytics	Network performance and anomaly baselining	Protocol/port statistics
Report Generation	Security incident documentation	Automated text file creation

Usage:

1. Clone the repository:

   git clone https://github.com/Ghaliah1/Network-Analyzer.git
   
   cd Network-Traffic-Analyzer
   

2. Install the required library:

   pip install scapy
   

3. Running the analyzer with the target PCAP file:

   python network_analyzer.py <filename.pcap>
   

Screenshots:

The output:

The report:

💡 Technical Accomplishments

• Network protocol analyzing

• Custom IDS development

• Security monitoring & threat detection

• Security tool development

• Security incident reporting