SkuldNorniern / fluere

Fluere is a powerful and versatile tool designed for network monitoring and analysis. It is capable of capturing network packets in pcap format and converting them into NetFlow data, providing a comprehensive view of network traffic. It also Provides Terminal User Interface.
Apache License 2.0
28 stars 3 forks source link
cross-platform flowlogs fluere hacktoberfest netflow netflow-exports netflow-v5 network-analysis network-capture network-monitoring network-security packet packet-capture packet-sniffer packets pcap rust security security-scanner security-tools

Fluere

FOSSA Status Rust Drone Build Status

Your Comprehensive Network Monitoring and Analysis Tool

Fluere is a robust tool designed for comprehensive network monitoring and analysis. It facilitates the capture of network packets in pcap format and their conversion into NetFlow data, offering a detailed view of network traffic dynamics. With support for both live and offline data capture, Fluere stands as a versatile solution suitable for a myriad of use cases.

Key Features:

Windows MacOS Linux
Windows, MacOS, and Linux are All Supported! YAY!
Help Image TUI Screen
Public IPs are masked to prevent privacy issues (except for DNS & Local broadcast)

Technical Overview

Fluere is built with Rust and leverages the libpcap library for packet capture. The core functionalities are encapsulated within the main.rs file, which defines the command-line interface and handles various commands and options.

Command Line Arguments

Customize your Fluere experience using the following command-line arguments:

Argument Description Usage Example
csv Title of the exported CSV file -c or --csv
list List available network interfaces -l or --list
interface Select network interface to use -i or --interface
duration Set capture duration (in ms) -d or --duration
timeout Set flow timeout (in ms) -t or --timeout
useMACaddress Use MAC address as key value -M or --useMAC
interval Set export interval (in ms) -I or --interval
sleep_windows Set thread pause interval for Windows -s or --sleep
verbose Set verbosity level -v or --verbose

Getting Started

Prerequisites

Before installing Fluere, ensure to install libpcap (Linux/macOS) or npcap (Windows) in winpcap compatible mode.

Installation

Install Fluere using the following command:

cargo install fluere

Usage Examples

Explore the diverse functionalities of Fluere with the following examples:

  1. Live NetFlow Capture and Conversion

    fluere online -i eth0 -d 1000 -t 600000 -I 1800000 -v 1
  2. Offline pcap to NetFlow Conversion

    fluere offline -f input.pcap -c output
  3. Packet Capture in pcap Format

    fluere pcap -i eth0 -d 1000
  4. Live Fluereflow Capture and Conversion

    fluere live -i eth0 -d 1000 -t 600000 -I 1800000 -v 1

For more detailed information and guidance, refer to the Fluere Wiki.