Network Traffic Analyst

Python, Cybersecurity & Data Protection — incorrectly specified categories?

Project translated automatically. Log in or register, to view the original by Ua It is necessary to develop a Python programming language network traffic analyzer/parser according to the example of a well-known network traffic generator/analyzer CICFlowMeter (originally this is a Java application).At the entrance, this application must accept the PCAP file or the corresponding *.csv file, "save as" from the original PCAP file (examples of both files are added).At the exit, the application must return *.csv file, in which each line corresponds to a separate network connection (TCP or UDP), and the column - a list of connectivity signs, starting with the sender's IP address, sender's network port, receiver's IP address and receiver's network port.Learn more about the work of CICFlowMeter and download the output software code from Github.First the application is used to generate bilateral flows, where the first package determines the direct (from the sender to the recipient) and the reverse (from the receiver to the sender) direction, then the calculation of more than 80 statistical signs of network traffic (e.g., duration, number of packages, number of bytes, length of packages, etc.) is carried out.), as well as statistical signs related to time characteristics, calculated separately for direct and reverse directions.All the signs that must be identified for each network connection (; )* are listed in Table 1 below.* Please note that the reverse connection must be excluded from the list, as all its signs will be duplicated by signs that correspond to the direct direction of the same connection.Link to the data set e format *.pcap and *csv: https://fex.net/ru/s/3aac1as