An update of the OIP project from https://it.wiki.usu.edu/OIP. It was modified to run under Debian 7.0 on May 2013. OIP is a visualization in which individual machine IPs are placed randomly on a display, and packets are visualized as different sized dots flowing from one machine to another.
C++ C
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
gui
vc6
.cproject
.gitignore
.project
6x13.png
COPYING
Makefile
NotesModif
NotesModif.md
README.md
Vera.ttf
aNotesModif
btndown.png
btnup.png
capreader.cpp
capreader.h
cbsel.png
cbunsel.png
chart.cpp
chart.h
clientmanager.cpp
clientmanager.h
clientpm.cpp
clientpm.h
config.cpp
config.h
encrypt.cpp
encrypt.h
entity.cpp
entity.h
entityset.cpp
entityset.h
entitytest.cpp
gui.dia
hexprint.cpp
hexprint.h
image.cpp
image.h
intervalreader.h
ips.h
iptree.cpp
iptree.h
kdtree.cpp
kdtree.h
lblbg.png
messages.cpp
messages.h
mnubg.png
mnudn.png
mnusel.png
mnuup.png
namecache.cpp
namecache.h
networkclasses.dia
networkpm.h
oip.conf
oip.tar.gz
oipd
oipd.cpp
oipgui
oipgui.cpp
oldparticle.cpp
packetmanager.cpp
packetmanager.h
packetpeek.h
packetsink.h
particle.cpp
particle.h
particlemanager.cpp
particlemanager.h
particlemanagertest.cpp
particles-dark-background.png
particles.png
particletest.cpp
structs.h
testclientmanager.cpp
testiptree.cpp
text.cpp
text.h
text2.png
widgets.png

README.md

README

This is an update and modification of th OIP project to run on a Debian 7.0.

I took the original code from https://it.wiki.usu.edu/OIP and try to run it, but unfortunately it didn't work. I changed some c++ calls and now it compiles and works fine.

Changes made:

  • Minimal fixes to run under Debian
  • Enlarge the size of the packets-balls so you can see them better.
  • Change the blue balls to white balls, to see it better with dark backgrounds.
  • Add the -e argument to speed up the analysis of pcap files. -e 1000 is normal -e 100 is 10x faster -e 10 is 100x faster
  • Add the -c argument to give the pcap file name in the command line.
    • If you give a pcap file name, the analysis starts right away.
  • Pause the capture by pressing the letter p.
  • Play again the capture by pressing the letter p.

Color code: On packet-balls: - Red for UDP - Green for TCP - White for ICMP On hosts: - I still don't know.

On the gui, you can also use the mouse and the keyboard.

Keyboard keys: - ! to open the menu - , to start displaying the capture (Load button). - p to pause and play the capture

It was and still is a GPLv3 project, so enjoy and have fun.

You need to install these on debian-based distros

  • apt-get install libcrypto++-dev libsdl-image1.2-dev libpcap-dev libsdl1.2-dev libfreetype6-dev g++ make

Installation

Type make If you have any dependency error, just install them.

You can modifiy the oip.conf file to suite your needs but it is optional.

Authors

Original code was made by Rian Shelley (Utah State Univeristy). New version in this git code is made by Sebastian Garcia (eldraco@gmail.com) and Vojtech Uhlir (wojtyla@agents.felk.cvut.cz) (Czech Technical University)

TODO

  • Put the color references on the screen.
  • Advance and rewind the packets.
  • When the capturing is being speed up, fade out the ip names quicker.

Thanks to the usu.edu for the project.