Application to comfortably monitor your network traffic
Multithreaded, cross-platform, reliable
Sniffnet is a simple yet insightful application to let you have a glance into your network traffic in a straightforward and appealing way
If you have Rust installed on your machine, the application binary can be installed with:
cargo install sniffnet
Otherwise, you can install Sniffnet through the installers available in the latest release.
Linux dependencies ![](https://user-images.githubusercontent.com/100347457/193474239-c48d37af-d4c1-4a94-9207-0d46c6d75f1f.png)
In order to correctly run Sniffnet on Linux systems, install the libraries and header files for the libpcap library:
sudo apt-get install libpcap-dev
Note that if you are not running as root, you need to set capabilities to inspect a network adapter:
sudo setcap cap_net_raw,cap_net_admin=eip <your/Sniffnet/executable/path>
Depending on your Linux environment you may also need libfontconfig
:
sudo apt-get install libfontconfig libfontconfig1-dev
- choose a network adapter to inspect
- select filters to apply to the observed traffic
- view real-time charts about traffic intensity (bytes and packets per second, incoming and outgoing)
- view overall statistics about the filtered traffic
- view most relevant connections (most recent, most packets, most bytes)
- save complete textual report with detailed information for each connection:
- source and destination IP addresses
- source and destination ports
- carried protocols
- amount of exchanged packets and bytes
- initial and final timestamp of information exchange
See details
Please, note that application layer protocols are just inferred from the transport port numbers.
Port number(s) | Application protocol | Description |
---|---|---|
20, 21 | FTP | File Transfer Protocol |
22 | SSH | Secure Shell |
23 | Telnet | Telnet |
25 | SMTP | Simple Mail Transfer Protocol |
49 | TACACS | Terminal Access Controller Access-Control System |
53 | DNS | Domain Name System |
67, 68 | DHCP | Dynamic Host Configuration Protocol |
69 | TFTP | Trivial File Transfer Protocol |
80, 8080 | HTTP | Hypertext Transfer Protocol |
109, 110 | POP | Post Office Protocol |
123 | NTP | Network Time Protocol |
137, 138, 139 | NetBIOS | NetBIOS |
143, 220 | IMAP | Internet Message Access Protocol |
161, 162, 199 | SNMP | Simple Network Management Protocol |
179 | BGP | Border Gateway Protocol |
389 | LDAP | Lightweight Directory Access Protocol |
443 | HTTPS | Hypertext Transfer Protocol over SSL/TLS |
636 | LDAPS | Lightweight Directory Access Protocol over TLS/SSL |
989, 990 | FTPS | File Transfer Protocol over TLS/SSL |
993 | IMAPS | Internet Message Access Protocol over TLS/SSL |
995 | POP3S | Post Office Protocol 3 over TLS/SSL |
1900 | SSDP | Simple Service Discovery Protocol |
5222 | XMPP | Extensible Messaging and Presence Protocol |
5353 | mDNS | Multicast DNS |
See details
Most of the errors that can occur are likely due to your system missing required pcap
dependencies,
necessary to correctly analyze a network adapter.
Check the Install and Run section for instructions on how to proceed.
For a Windows reference, you can check issue #1.
Some Linux systems also need libfontconfig
, see issue #18 for a reference.
If you have problems after having installed Sniffnet through the provided installers, it could be due to your OS not being compatible with the pre-built binaries I generated for you.
Reach me out, and I'll try to generate an installer for your specific operating system.
In any case don't hesitate to open an issue, and I will do my best to help you!
Do you want to improve Sniffnet? Check here
Sniffnet is also open to design contributions: