Linkedin Facebook Blog Email

🔳 NetDahar

NetDahar logs network activities of each process with the following data:

• Process Name
• Process PID
• Source File of The Process
• Opened Files by The Process
• Commandline of The Process
• Username of The Process
• Source IP
• Source Port
• Remote IP
• Remote Port
• CPU Percentage
• Log Time

Hopefully, if multiple processes with the same name are found, but they have different source IP or, source port or, remote IP or, remote port then NetDahar will log each of those processes individually by adding an unique numerical value with each process name so that, you can differentiate between them.

📓 Required Python3 Modules:

Install these modules using pip3 as root/administrator if not installed:

• psutil
• threading
• json
• collections

🔰 How to Use (Linux):

1. After cloning NetDahar, go to its directory using cd NetDahar command.
2. Now run the netdahar.py script using sudo python3 netdahar.py command. Logging will be started at this point.

Note: If you want to continuously store logs then, add the netdahar.py script to crontab for running it on startup automatically (details).

🔰 How to Use (Windows):

(NetDahar is created for Linux but also works in Windows)

1. After cloning NetDahar, open an Administrator command prompt and go to its directory using cd NetDahar command.
2. Now run the netdahar.py script using python netdahar.py command. Logging will be started at this point.

Note: If you want to continuously store logs then, add the netdahar.py script to autorun registry key to run it on each reboot automatically (details).

📋 View The Logs

NetDahar will store logs by creating a file with today's date in the './NetDahar/Report' directory. And if you add NetDahar to startup then it'll store each day's logs by creating file with that day's date. And logs are written to the log file after every 20 seconds.