This Python project, "Network Tracking Analysis," is designed to analyze network traffic data captured in a .pcap file and generate a KML (Keyhole Markup Language) file that can be used to visualize the geolocation information of the network traffic. It utilizes various libraries like requests, dpkt, socket, and pygeoip to accomplish this task.
-
Retrieve your public IP address using an external service.
-
Translate IP addresses to geolocation coordinates.
-
Generate a KML file with geolocation information for network traffic.
-
Visualize network traffic geolocation data in tools like Google Earth.
Before you get started, ensure that you have the following dependencies installed:
-
Python 3.x -
requestslibrary -
dpktlibrary -
pygeoiplibrary -
A GeoIP database file named
"geo-city.dat"pip install requests dpkt pygeoip
-
Clone this repository or download the project files to your local machine.
-
Make sure you have the
"geo-city.dat"GeoIP database file in the same directory as the project. -
Open a terminal or command prompt.
-
Run the script by providing the path to the .pcap file as a command-line argument:
python main.py wireshark.pcap -
Replace
wireshark.pcapwith the path to your own.pcapfile. -
The script will process the network traffic data, generate a KML file named
"traffic.kml,"and save it in the same directory. -
You can open the "traffic.kml" file in Google Earth or any KML-compatible application to visualize the geolocation information of the network traffic.
- you can open wireshark program then, start capture some network traffics and stop & save the capture file in this
.pcapformat
Note: after you generate kml file, go ahead and open https://www.google.com/mymaps/, and import your kml file.