Network Traffic Virtualization Using Wireshark and Pygeoip

Abstract

Security analysts possess the requisite expertise to discern various types of network traffic, detect instances of unusually high activity, and pinpoint the specific network nodes responsible. Furthermore, network traffic visualization aids users in pinpointing servers and tracking data flows, thereby enabling researchers to identify potential online threats. Leveraging Wireshark's functionalities as both a packet tracer and capture tool, the process of network analysis hinges on the selection of appropriate packet capture parameters. In this study, Wireshark serves as the cornerstone for creating a network tracking system. By employing Wireshark to capture data packets, analyze them, and subsequently translate the IP addresses into latitude and longitude coordinates, researchers can plot the source and destination IPs on a Google map. This innovative approach allows users to visualize network traffic patterns on a geographical scale and effectively monitor them.