Simple sniffer using scapy and PyQt5.
Just download them all and run main.py
Use modified scapy3k
Only test and modify the lib concerning Windows users.
Need to install Win10Pcap(Recommended), Npcap(might have slight issue of missing certain packets).
psutil Used to detect packet received amount in system level to calculate network speed.
ansi2html Used to parse ANSI ESCAPE Sequence to html css.
python main.py
Multiple features in this project.
Choose the filter anytime you like and then click the start button twice to continue sniffing.(have to stop and start to take effect)
Select one packet, or use Ctrl+LeftClick to choose multiple packets. You can save them into a txt file with readable format.
Select one packet, and it will automatically find related packets and reassemble them.
If the total fragments number is too big, it will give you the option to reassemble and decode it or not.
Remember that all the related fragments will be displayed immediately no matter what.
After that processing, you are welcome to click the Reassembly button below on the status to convert them into one entire file.
Only tested in FTP Transmission, HTML reassembly and ICMP(ping), and the file size can be up to 15MB (might take certain time processing to GUI)
New feature is added to show the whole size number after reassembly to have a quick peak of the whole process.
Using search bar wisely can actually save a lot of time. Keywords are searched in whole packet's hex or decoded by UTF-8 and GB2312,which is very convenient to find http headers of filename.
The default OC module will never let you down when an additional dedicated process is used for listening and sniffing. However, it is very CPU-consuming, but you can turn it off any time (have to stop and start to take effect)
The ultimate style of Network Speed uses the API of psutil which is extremely accurate and responsive.
Every packet is sorted by the default color theme of wireshark. Default On. Using "Ctrl+F" to turn off/on. ADD Mouse entering and leaving event for each row makes the UI more colorful and better.
