Skip to content

Latest commit

 

History

History
34 lines (25 loc) · 1.45 KB

README.adoc

File metadata and controls

34 lines (25 loc) · 1.45 KB

PacketSniff

This app takes a Network Interface and monitors TCP/UDP/ICMP traffic on the basis of their count, size and difference between the first and last packet of each protocol. Also it checks if a source ip sends more packets than a threshold and detects it as DoS attack.

Eventually, it will log each run with full details in a file called "PacketSniff_log.txt".


Figure 1: PacketSniff in action

In order to change the program behavior:

  • run_time: App running time in seconds

  • max_att_log: Max number of IPs for DETECTING potential attackers

  • pot_att_time: Time in which we check for DETECTING potential attacks - in Seconds

  • pot_att_trs: Threshold of requests in pot_att_time for DETECTING potential_attacks


License

Copyright © 2018 S. Saeed Hosseini. All right reserved.

This application is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version.

This application is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.