ipv6 survey Tool (survey6)
Ipv6 is the internet's future, and it necessitated a more scalable survey tool to comprehend how routing and DNS function. The purpose of this project is to create an IPv6 listener that will passively collect IPv6 traffic data as a passive data collection tool for cyber security research.
- Develop a Linux network probe to intercept ipv6 traffic
- To centralize the data being intercepted by the probe, develop a geo-distributed grid application that integrated with the probe.
Survey6 tool has three main components, follow describes each component, its functionalities and setup.
You can find the setup and installation guide for each of the modules in their respective module directories and they are linked below too.
Intercept and collect all the ipv6 traffic (regardless of the protocol) therefore libpcap is preferable. probe binaries must run as a service of the operating system (OS could be Linux host). Moreover, the probe cast a heartbeat to the C&C server for its heath checks mechanisms. This must be implemented using gRPC. Probe identifies ideal states of the host network interface and uses those time windows to send the collected ipv6 pcap. For this, data must be annotated with meta-information for aggregation purposes (meta information could be discussed)
Probe CLI is a sub-component of Probe that allows starting (passing the registering string from C&C server, eg- How you add new nodes to Kubernetes), suspending the probe's execution in the host machine.
Python, GRPC, Scapy
- Probe Video
- [Probe CLI Video]
C&C server should have the Probe registering mechanism. And it listens to registered Prob's heartbeats. WebUI shows the active states of Probes in a list view.
Python, gRPC, Redis queue, SQLite, Flask
Data Collection server. Collects, cleans and stores IPv6 packets for future study.
- Receive IPv6 packets from clients
- Hourly and daily zipping of data files
We are glad that you are willing to contribute. Tasks to be taken up next are:
- Fix issue that fails one testcase - C&C Server
- Display status of connected and registered probes - C&C server
- Sending password pf the data aggregator from server to the probe on regisration
Stretch goal:
- Hosting the debian packages
Please do follow contributing guidelines to help the maintainers. Thank you for your wonderful cooperation!