ovizart

OVIZART is an open-source visual analysis tool for network traffic, designed to help users analyze and understand network protocols and data flows. It processes PCAP files to extract and visualize traffic details, making it valuable for network monitoring, security analysis, and protocol debugging.

Key Features

• Protocol Detection — Uses Bro-IDS and tshark to identify application-layer protocols like HTTP, DNS, and SMTP.
• TCP Reassembly — Leverages Bro and tcpflow to reconstruct TCP streams for accurate content analysis.
• Traffic Visualization — Provides web-based visualizations of network traffic patterns and extracted data.
• File Upload & Analysis — Allows users to upload PCAP files for automated processing and inspection.
• Multi-Server Support — Can run via Django's development server or be deployed on a production web server like Apache.

Philosophy

OVIZART emphasizes practical network traffic analysis by integrating multiple tools (Bro, tshark, tcpflow) to overcome individual limitations and provide reliable protocol detection and content extraction.