eonraider / packet-sniffer

A Network Packet Sniffing tool developed in Python 3.

Python 3 Network Packet Sniffer

A Network Packet Sniffer developed in Python 3. Packets are disassembled as they arrive at a given network interface controller and their information is displayed on the screen.

This application depends exclusively on the NETProtocols library (also developed and maintained by EONRaider) from version 2.0.0 and above and can be run by any Python 3.8+ interpreter.

Demo

Running the Application

I. Development Mode

Simply clone this repository with git clone, install the dependencies and execute the sniffer.py file.

user@host:~$ git clone https://github.com/EONRaider/Packet-Sniffer.git
user@host:~$ cd Packet-Sniffer
user@host:~/packet-sniffer$ pip install -r requirements.txt <--or--> poetry install
user@host:~/packet-sniffer$ sudo python3 packet_sniffer/sniffer.py

The sudo command is required due to the use of socket.SOCK_RAW, which needs administrative privileges to run on GNU/Linux. Notice that the existence of dependencies may require the execution of the interpreter contained in the virtual environment in which the dependencies have been installed (if you use one), instead of just using the system interpreter.

II. (Optional) Build the binary

Use the build.py file to compile your own binary with the PyInstaller package. You just need to install all dependencies and build. Dependency management works with both Poetry (recommended) and Virtualenv.

<-- Install dependencies as shown above in Step I -->
user@host:~/packet-sniffer$ python3 build.py

Usage

sniffer.py [-h] [-i INTERFACE] [-d]

Network Packet Sniffer

optional arguments:
  -h, --help            show this help message and exit
  -i INTERFACE, --interface INTERFACE
                        Interface from which packets will be captured (monitors
                        all available interfaces by default).
  -d, --data            Output packet data during capture.

Legal Disclaimer

The use of code contained in this repository, either in part or in its totality, for engaging targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws.

Developers assume no liability and are not responsible for misuses or damages caused by any code contained in this repository in any event that, accidentally or otherwise, it comes to be utilized by a threat agent or unauthorized entity as a means to compromise the security, privacy, confidentiality, integrity, and/or availability of systems and their associated resources. In this context the term "compromise" is henceforth understood as the leverage of exploitation of known or unknown vulnerabilities present in said systems, including, but not limited to, the implementation of security controls, human- or electronically-enabled.

The use of this code is only endorsed by the developers in those circumstances directly related to educational environments or authorized penetration testing engagements whose declared purpose is that of finding and mitigating vulnerabilities in systems, limiting their exposure to compromises and exploits employed by malicious agents as defined in their respective threat models.

packet-sniffer's Issues

Docker support

Add very basic docker support.

Provides a means for those on Windows and Mac (#2 and #4) to run this program.

Packet-Sniffing Proj.

ImportError: cannot import name 'PF_PACKET' from 'socket'

I'm on a 2020 MacBook Pro 16", and I'm unable to get PF_PACKET from the socket module. My googling suggests it's not available on Mac at all. Is there some fix that could be done to enable this support? Thanks!

Error on Mac. Cannot import name 'PF_PACKET' from 'socket'

I get this error when I try to run it on my Mac (OSX 10.13.6)

$python3.9 packet_sniffer.py -i en9 -d
Traceback (most recent call last):
  File "/Users/frak/git/Packet-Sniffer/packet_sniffer.py", line 10, in <module>
    from socket import ntohs, socket, PF_PACKET, SOCK_RAW
ImportError: cannot import name 'PF_PACKET' from 'socket' (/usr/local/Cellar/python@3.9/3.9.0_1/Frameworks/Python.framework/Versions/3.9/lib/python3.9/socket.py)

AttributeError: 'Ethernet' object has no attribute 'lower'

I am on ubuntu based machine, using python 3.8.5

ran the script
sudo python3 packet_sniffer.py -i wlo1 -d

Traceback (most recent call last):
  File "packet_sniffer.py", line 153, in <module>
    sniff(cli_args)
  File "packet_sniffer.py", line 138, in sniff
    packet_sniffer.execute()
  File "packet_sniffer.py", line 44, in execute
    setattr(self, protocol.lower(), protocol)
AttributeError: 'Ethernet' object has no attribute 'lower'

proj