Home

INDEX

1. Introduction
2. Deployment
3. Design
4. Sniffer
5. FlowMeter
6. Security

Sniffer

Vision uses the tshark sniffer in order to capture packets from the host network. To do so, the application must access the host network interface, so the NIDS Docker container has been deployed using network mode: host.

tshark creates a .pcap file which is transformed into a .csv file using the CICFlowMeter tool.

Capture time is hardcoded into the utils.js file, inside the Frontend container.