|
|
<!DOCTYPE html> |
|
|
<html lang="en"> |
|
|
<head> |
|
|
<meta charset="UTF-8"> |
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0"> |
|
|
<title>Packet Peeper Pro - Documentation</title> |
|
|
<script src="https://cdn.tailwindcss.com"></script> |
|
|
<script src="https://unpkg.com/feather-icons"></script> |
|
|
<script src="https://cdn.jsdelivr.net/npm/vanta@latest/dist/vanta.net.min.js"></script> |
|
|
<style> |
|
|
.terminal { |
|
|
font-family: 'Courier New', monospace; |
|
|
background-color: #1a1a1a; |
|
|
color: #00ff00; |
|
|
border-radius: 8px; |
|
|
overflow-y: auto; |
|
|
padding: 1rem; |
|
|
} |
|
|
.code-block { |
|
|
background-color: #1a1a1a; |
|
|
color: #00ff00; |
|
|
padding: 1rem; |
|
|
border-radius: 8px; |
|
|
font-family: 'Courier New', monospace; |
|
|
margin: 1rem 0; |
|
|
} |
|
|
</style> |
|
|
</head> |
|
|
<body class="bg-gray-900 text-white"> |
|
|
<div id="vanta-bg" class="fixed inset-0 z-0"></div> |
|
|
<div class="relative z-10 container mx-auto px-4 py-8"> |
|
|
<header class="flex justify-between items-center mb-8"> |
|
|
<div class="flex items-center"> |
|
|
<i data-feather="book" class="text-blue-500 mr-2"></i> |
|
|
<h1 class="text-3xl font-bold bg-clip-text text-transparent bg-gradient-to-r from-blue-400 to-purple-500"> |
|
|
Packet Peeper Pro Documentation |
|
|
</h1> |
|
|
</div> |
|
|
<a href="index.html" class="bg-gray-700 hover:bg-gray-600 px-4 py-2 rounded-lg flex items-center"> |
|
|
<i data-feather="arrow-left" class="mr-2"></i> Back to App |
|
|
</a> |
|
|
</header> |
|
|
|
|
|
<div class="grid grid-cols-1 lg:grid-cols-3 gap-6"> |
|
|
<div class="lg:col-span-2 space-y-6"> |
|
|
<div class="bg-gray-800 bg-opacity-70 rounded-xl p-6 backdrop-blur-sm"> |
|
|
<h2 class="text-xl font-semibold mb-4 flex items-center text-blue-400"> |
|
|
<i data-feather="activity" class="mr-2"></i> Working with Real Network Data |
|
|
</h2> |
|
|
<p class="mb-4">This guide explains how to ensure Packet Peeper Pro works with real network data instead of relying on synthetic data.</p> |
|
|
|
|
|
<h3 class="text-lg font-semibold mt-4 text-green-400">1. Live Packet Capture</h3> |
|
|
<p>Packet Peeper Pro uses PyShark or Scapy libraries to capture live network packets directly from your network interfaces.</p> |
|
|
|
|
|
<div class="code-block"> |
|
|
<p class="text-yellow-300"># Example tcpdump command</p> |
|
|
<p>tcpdump -i eth0 -w capture.pcap</p> |
|
|
</div> |
|
|
|
|
|
<h3 class="text-lg font-semibold mt-4 text-purple-400">2. Flow Collection (NetFlow/IPFIX/sFlow)</h3> |
|
|
<p>Configure your network devices to export flow data:</p> |
|
|
|
|
|
<div class="code-block"> |
|
|
<p class="text-yellow-300"># Example Cisco router configuration</p> |
|
|
<p>ip flow-export version 5</p> |
|
|
<p>ip flow-export destination <PacketPeeper-IP> 9995</p> |
|
|
<p>ip flow-export source <Router-Interface></p> |
|
|
<p>interface GigabitEthernet0/0</p> |
|
|
<p class="ml-4">ip flow ingress</p> |
|
|
</div> |
|
|
|
|
|
<h3 class="text-lg font-semibold mt-4 text-red-400">3. PCAP File Import</h3> |
|
|
<p>Public PCAP repositories with real anonymized data:</p> |
|
|
<ul class="list-disc pl-5 space-y-1 mt-2"> |
|
|
<li><a href="https://www.malware-traffic-analysis.net/" class="text-blue-400 hover:underline" target="_blank">Malware Traffic Analysis</a></li> |
|
|
<li><a href="https://www.netresec.com/?page=PcapFiles" class="text-blue-400 hover:underline" target="_blank">NETRESEC PCAP files</a></li> |
|
|
<li><a href="https://www.ll.mit.edu/r-d/datasets" class="text-blue-400 hover:underline" target="_blank">DARPA Intrusion Detection Data Sets</a></li> |
|
|
</ul> |
|
|
</div> |
|
|
</div> |
|
|
|
|
|
<div class="space-y-6"> |
|
|
<div class="bg-gray-800 bg-opacity-70 rounded-xl p-6 backdrop-blur-sm"> |
|
|
<h2 class="text-xl font-semibold mb-4 flex items-center text-yellow-400"> |
|
|
<i data-feather="alert-triangle" class="mr-2"></i> Important Considerations |
|
|
</h2> |
|
|
|
|
|
<h3 class="text-lg font-semibold mt-4">Data Verification</h3> |
|
|
<ul class="list-disc pl-5 space-y-1 mt-2"> |
|
|
<li>Check source and destination IPs</li> |
|
|
<li>Verify protocol distribution</li> |
|
|
<li>Look for expected patterns</li> |
|
|
</ul> |
|
|
|
|
|
<h3 class="text-lg font-semibold mt-4">Troubleshooting</h3> |
|
|
<ul class="list-disc pl-5 space-y-1 mt-2"> |
|
|
<li>Verify capture privileges</li> |
|
|
<li>Check interface configuration</li> |
|
|
<li>Confirm network positioning</li> |
|
|
<li>Test with broader filters</li> |
|
|
</ul> |
|
|
|
|
|
<h3 class="text-lg font-semibold mt-4 text-red-400">Security & Privacy</h3> |
|
|
<ul class="list-disc pl-5 space-y-1 mt-2"> |
|
|
<li>Regulatory compliance (GDPR, HIPAA)</li> |
|
|
<li>Anonymize sensitive data</li> |
|
|
<li>Implement access controls</li> |
|
|
<li>Secure stored capture files</li> |
|
|
<li>Data retention policy</li> |
|
|
</ul> |
|
|
</div> |
|
|
|
|
|
<div class="bg-gray-800 bg-opacity-70 rounded-xl p-6 backdrop-blur-sm"> |
|
|
<h2 class="text-xl font-semibold mb-4 flex items-center text-green-400"> |
|
|
<i data-feather="key" class="mr-2"></i> Quick Reference |
|
|
</h2> |
|
|
|
|
|
<div class="terminal"> |
|
|
<p class="text-yellow-300"># Common capture filters:</p> |
|
|
<p>tcp port 80 or tcp port 443</p> |
|
|
<p>host 192.168.1.100</p> |
|
|
<p>net 192.168.1.0/24</p> |
|
|
<br> |
|
|
<p class="text-yellow-300"># Useful commands:</p> |
|
|
<p>tcpdump -i eth0 -w capture.pcap</p> |
|
|
<p>tshark -i eth0 -f "tcp port 80" -w http.pcap</p> |
|
|
</div> |
|
|
</div> |
|
|
</div> |
|
|
</div> |
|
|
</div> |
|
|
|
|
|
<script> |
|
|
|
|
|
VANTA.NET({ |
|
|
el: "#vanta-bg", |
|
|
mouseControls: true, |
|
|
touchControls: true, |
|
|
gyroControls: false, |
|
|
minHeight: 200.00, |
|
|
minWidth: 200.00, |
|
|
scale: 1.00, |
|
|
scaleMobile: 1.00, |
|
|
color: 0x3fff00, |
|
|
backgroundColor: 0x111111, |
|
|
points: 10.00, |
|
|
maxDistance: 22.00, |
|
|
spacing: 17.00 |
|
|
}); |
|
|
|
|
|
|
|
|
feather.replace(); |
|
|
</script> |
|
|
</body> |
|
|
</html> |
