Skip to content

privatefound/AI-PCAP-Analyzer

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

AI PCAP Analyzer

image

AI PCAP Analyzer is a next-generation network analysis tool that combines the power of Wireshark with a local Large Language Model (LLM) to act as your intelligent security analyst.

Note

The application is under development. I welcome suggestions on how to improve it or any bugs you encounter.

🚀 Features

  • Local AI Analyst: Powered by Ollama (recommended model: gemma3:12b).
  • Conversation Memory: The AI remembers your context and files.
  • Smart Visuals: Instant red/orange highlighting for network anomalies (Retransmissions, RSTs).
  • Multi-language Support: 🇮🇹 🇺🇸 🇨🇳 🇷🇺 (Italian, English, Chinese, Russian).
  • Contextual Understanding: Rename captures (e.g., "Firewall Logs") to give the AI better context.
  • Privacy First: All analysis happens locally. No data leaves your machine.

🛠️ Prerequisites

  1. Python 3.10+
  2. Node.js 18+
  3. Wireshark/Tshark installed (sudo apt install tshark).
  4. Ollama installed and running.

AI Setup

This project requires a running Ollama instance.

  1. Install Ollama from ollama.com.
  2. Pull the recommended model:
    ollama pull gemma3:12b
  3. Make sure Ollama is accessible. By default, the app expects it at http://127.0.0.1:11434 (update backend/chat.py if different).

📦 Installation

⚡ Quick Start (Recommended)

You can use the automated installer to set up both backend and frontend:

chmod +x install.sh
./install.sh

Then start the application:

./run.sh

Manual Setup

Backend

cd backend
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt
./run.sh  # Starts backend on http://localhost:8000

Frontend

cd frontend
npm install
npm run dev # Starts frontend on http://localhost:5173

🖥️ Usage

  1. Open http://localhost:5173.
  2. Drag & drop a .pcap file.
  3. Click the Robot Icon (🤖) to open the AI Analyst.
  4. Ask questions like:
    • "Why is the connection resetting?"
    • "Show me all DNS traffic from 192.168.1.5"
  5. Use the Language Switcher in the top right to change the interface language.

🤝 Contributing

Created by privatefound.

📄 License

MIT

About

AI PCAP Analyzer revolutionizes network forensics by combining a modern, ultra-wide interface with a Local AI Analyst. Multi-language support (EN, IT, ZH, RU), and conversational filtering—all without sending a single packet to the cloud.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors