traffic-map | Network traffic mapping software that collects TCP traffic

traffic-map is a Python library. traffic-map has no bugs, it has no vulnerabilities, it has build file available, it has a Strong Copyleft License and it has low support. You can download it from GitHub.

Visualizes TCP Network Traffic from a large number of servers and combines with metadata about servers and their services in a map highlighting environments and architecture domains. The servers or clusters are drawn as circle nodes and lines between them represent traffic collected during the minute of monitoring. Checkboxes allow you to suppress certain types of traffic in visualization to prevent all nodes from being connected together by monitoring. The visualization is clustered by archdomain and env. Env is the traditional list but expandable: prod, stage, etc. Archdomain is a hierarchical name structure of what function an instance uas, and are usually identified with clusters. The name parts are alphabetical and separated with slash; they do not start with slash. For example, all online systems are "online/" and all offline systems are "offline/". For example, online mid-tier services are "online/midtier/name." You can edit tags.js to change these field types. There are three major modes of grouping: ungrouped, grouped by archdomain, and grouped by archdomain. You can also choose to allow traffic to extert a bigger or smaller influence on layout. D3 and D3 gravity offer many layout mechanisms and you can change lots of parameters in graph.ks. In practice, grouping by archdomain does not appear to be useful, but group by env is. There are three major data sets to visualize: instances, clusters (named by archdomain), and security-groups. Ideally security-groups would mirror clusters.