Pcap Anaylyzer

pcapAnalyzer is a simple Python tool for analyzing .pcap files, providing statistics on IPs, protocols, ports, and traffic patterns to help understand network activity.

🔧 Installation

1. Clone the repository

   git clone https://github.com/Arx7331/pcapAnalyzer.git
   cd pcapAnalyze

2. Install dependencies

   pip install -r requirements.txt

3. Running the tool

   python main.py <yourfile.pcap/pcapng>

Your services dictonary is on line 7-15

common_services = {
    22: "SSH",
    53: "DNS",
    80: "HTTP",
    443: "HTTPS",
    3389: "RDP",
    123: "NTP",
    25565: "Minecraft"
}

Features :

• Unique IPs Counter
• Most common source IP
• Most common source ASN
• Attack protocol percentages
• TCP Flag percentages (If TCP is present in the attack)
• Total traffic from the pcap (not the whole attack)
• Most common Destination & Source port
• Exclude ip option
• Export all information to a txt