Skip to content

A platform built for easy-to-use automated network traffic analysis

License

Notifications You must be signed in to change notification settings

davedittrich/packet_cafe

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Overview

Background

Packet Café is a platform built for easy-to-use automated network traffic analysis. It is built to be modular and allow for a pipeline of tools that are triggered by different inputs and outputs. Currently the tools supplied are defined here.

This service accepts PCAP files and then processes them against the pipeline of tools providing automated analysis that gets returned in JSON format. That can then be consumed via the API directly and put into other systems such as SIEMs, searched and filtered through the included JSON viewer, or viewed through the included visualizations of the Packet Café frontend.

The hope and motivation behind the Packet Café platform is to enable lowering the barrier to understanding what is actually in a network traffic capture file (PCAP) and provide insight without having to be an expert in networking.

Ready to get started and take Packet Café for a spin already? Go here. Otherwise, we recommend reading through the design section to better understand the bigger picture.

Packet Café is open source and welcomes contributions to the project.

{% hint style="info" %} While the focus of the project is around network traffic and specifically processing PCAP files, the platform has been built such that the formats of what it can process are only dependent on the set of analytic processes (tools) and what inputs they can handle. The tools could be redefined to ones that handle different inputs while still leveraging the entire pipeline and feedback loop of results. {% endhint %}

About

A platform built for easy-to-use automated network traffic analysis

Resources

License

Code of conduct

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Jupyter Notebook 93.1%
  • JavaScript 5.0%
  • Python 1.0%
  • CSS 0.6%
  • Dockerfile 0.2%
  • HTML 0.1%