Desenvolvimento de uma ferramenta de monitoramento de rede utilizando a biblioteca Scapy

Abstract

The increasing sophistication of cyberattacks, such as DDoS, Port Scanning, and SYN Flood, has heightened the need for effective network traffic monitoring solutions. However, traditional tools require advanced technical knowledge, making them impractical for users without specialized training. To address this demand, the tool proposed on this paper was developed in Python, utilizing the Scapy library for packet capture and analysis. Among its key features, the tool offers real-time packet capture, identification of the main network protocols, and an alert system capable of detecting suspicious activities, such as port scans and denial-of-service attacks. To validate its effectiveness, the tool was tested in a controlled environment, simulating different traffic scenarios, including both normal patterns and malicious attacks. The tests demonstrated that the solution accurately identifies suspicious behavior, generating visual alerts and detailed network traffic statistics. Furthermore, the simplified interface allows users with little technical experience to intuitively use the tool, making network security monitoring more accessible.