Difference between revisions of "HowTo Generate a 3D Pie Chart of nDPI Detected Protocols"

From NST Wiki
Jump to navigationJump to search
(Example)
(Reference)
 
(18 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
__TOC__
 
__TOC__
 
= Overview =
 
= Overview =
[[File:Thunderbolt.png|frame|left|'''[[Feature Release Symbol | <center>NST 22<br /> SVN: 7752</center>]]''']]A new  '''Multi-Traceroute (MTR)''' networking tool has been developed for '''NST 22'''.  This tool provides an interactive '''Traceroute''' visual using '''[https://en.wikipedia.org/wiki/Scapy Scapy]''' similar to the [https://en.wikipedia.org/wiki/Traceroute Traceroute Command] and has been integrated into the '''NST WUI'''.  NST uses the '''[https://en.wikipedia.org/wiki/Python_(programming_language) Python 3]''' version of Scapy known as [https://phaethon.github.io/scapy/ Scapy3k].
+
[[File:Thunderbolt.png|frame|left|'''[[Feature Release Symbol | <center>NST 22<br /> SVN: 7752</center>]]''']]NST enhances the results ''generated'' from the '''[http://www.ntop.org/ndpi/released-ndpi-1-5-1-and-ntopng-1-2-1/ ndpiReader]''' command by visualizing the detected protocols with a 3D Pie Chart proportionally sized by their associated packet size. NST uses code from the '''[http://www.rgraph.net/ RGraph 2D/3D Javascript Charting Project]''' for producing the 3D Pie Chart. The '''ndpiReader''' command leverages '''[http://www.ntop.org ntop's]''' '''[http://www.ntop.org/products/deep-packet-inspection/ndpi/ nDPI (Deep Packet Inspection) Library]''' to analyze a network packet capture.
  
 +
The "'''nDPI Decode'''" button found in the decode section of both the '''Single-Tap''' and '''Multi-Tap''' Network Packet Capture pages is used to generate the 3D Pie Chart Capture Analysis.
  
 +
== Reference Diagram==
  
== Example ==
+
The image below serves as a reference diagram for the 3D Pie Chart Capture Analysis of nDPI Detected Protocols. Interactive controls are defined in the call-outs.
  
Using the Scapy Multi-Traceroute page can be as simple as entering the host name you want to perform the trace on ([http://www.techhounds.com www.techhounds.com] in the example below) and pressing the '''Run''' button.
 
  
 
----
 
----
 
[[Image:Ndpi3dpiechart.png|900px|center|3D Pie Chart Capture Analysis of nDPI Detected Protocols]]
 
[[Image:Ndpi3dpiechart.png|900px|center|3D Pie Chart Capture Analysis of nDPI Detected Protocols]]
 
----
 
----

Latest revision as of 13:56, 22 April 2016

Overview

NST enhances the results generated from the ndpiReader command by visualizing the detected protocols with a 3D Pie Chart proportionally sized by their associated packet size. NST uses code from the RGraph 2D/3D Javascript Charting Project for producing the 3D Pie Chart. The ndpiReader command leverages ntop's nDPI (Deep Packet Inspection) Library to analyze a network packet capture.

The "nDPI Decode" button found in the decode section of both the Single-Tap and Multi-Tap Network Packet Capture pages is used to generate the 3D Pie Chart Capture Analysis.

Reference Diagram

The image below serves as a reference diagram for the 3D Pie Chart Capture Analysis of nDPI Detected Protocols. Interactive controls are defined in the call-outs.



3D Pie Chart Capture Analysis of nDPI Detected Protocols