Packet Sniffer Python

A beginner-friendly SOC Analyst / Network Security project that analyzes network packet data and identifies suspicious traffic patterns.

SOC Skills Demonstrated

• Packet analysis
• Network traffic monitoring
• TCP/IP fundamentals
• Suspicious port detection
• Threat hunting
• Python scripting
• Blue Team documentation

Project Files

• packet_sniffer.py - Main Python script
• sample_packets/sample_traffic.csv - Sample packet data
• reports/packet_report.txt - Report created after running the tool
• requirements.txt - Python requirements

What This Tool Detects

1. Suspicious ports
2. Repeated connections from the same source IP
3. Possible port scanning
4. Unusual protocols
5. High-risk destination ports

How to Run

python packet_sniffer.py sample_packets/sample_traffic.csv

Example Output

PACKET SNIFFER REPORT
Total packets analyzed: 10
Suspicious packets found: 4

ALERT: Possible port scan from 192.168.1.50
ALERT: Suspicious destination port 3389 detected

Why This Project Matters

SOC Analysts and network defenders review traffic patterns to identify attacks, scanning, brute-force activity, and suspicious connections. This project shows that you understand packet analysis and network monitoring concepts.