SysAdminProject/GUI.py at main · ajh6/SysAdminProject · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
# using Scapy in a python script requires the .py file to be ran in root privilage
# run this .py file using: sudo python3 filename

import tkinter as tk
import sys
from tkinter import ttk
from tkinter.scrolledtext import ScrolledText
import threading
import collections
import scapy.all as scapy
from collections import Counter
import plotly

from collections import Counter

thread = None
should_stop = False
subdomain = ''
source_ip_dict = collections.defaultdict(int)
count = Counter()


def start_sniffing():
    global should_stop
    global thread
    global subdomain

    subdomain = subdomain_entry.get()

    if (thread is None) or (not thread.is_alive()):
        should_stop = False
        thread = threading.Thread(target=sniffing).start()


def updateTable():
    global treev
    global source_ip_dict

    for item in treev.get_children():
        treev.delete(item)

    for ip in source_ip_dict:
        print(ip)
        treev.insert('', index=tk.END, text=ip, values=(ip, source_ip_dict[ip]))


def handler(packet):
    global source_ip_dict
    global subdomain
    global treev
    global count

    print(packet.summary())

    if 'IP' in packet:
        src_ip = packet['IP'].src
        #dest_ip = packet['IP'].dst
        count[src_ip] += 1

        if src_ip[0:len(subdomain)] == subdomain:

            if src_ip not in source_ip_dict:
                init = 1
                source_ip_dict[src_ip] = init
                updateTable()
                treev.pack(fill=tk.X)

            else:
                source_ip_dict[src_ip] += 1
                updateTable()


def sniffing():
    scapy.sniff(prn=handler, stop_filter=stop_sniffing)


def stop_sniffing(packet):
    global should_stop
    return should_stop


def stop_button():
    global should_stop
    should_stop = True

    xAxis = []
    yAxis = []

    for ip in count:
        xAxis.append(ip)
        yAxis.append(count[ip])

    print("Displaying Graph...")

    plotly.offline.plot({"data": [plotly.graph_objs.Bar(x=xAxis, y=yAxis)]})


root = tk.Tk()
root.configure(bg="yellow")
root.title("Packet Sniffer")
root.minsize(800, 800)

label = tk.Label(root, text="Welcome to the Python Networking Tool", font=('Arial', 18))
label.pack(padx=20, pady=20)

buttonframe = tk.Frame(root)
buttonframe.columnconfigure(0, weight=1)
buttonframe.columnconfigure(1, weight=1)
buttonframe.pack(fill='x')

btn1 = tk.Button(buttonframe, text="Start Sniffing", font=('Arial', 18), bg='green', fg='black', activebackground='red', command=start_sniffing)
btn2 = tk.Button(buttonframe, text="End Sniffing", font=('Arial', 18), bg='red', fg='black', activebackground='red', command=stop_button)
btn1.grid(row=0, column=0, sticky=tk.W+tk.E)
btn2.grid(row=0, column=1, sticky=tk.W+tk.E)


subdomain_entry = tk.Entry(root)

treev = ttk.Treeview(root, height=400, column=("IP", "Frequency"), show='headings')

treev.heading('#1', text='Source IP Address')
treev.heading('#2', text='Request Frequency')

root.mainloop()