{"id":18011086,"url":"https://github.com/regit/nf3d","last_synced_at":"2025-03-26T14:32:21.841Z","repository":{"id":141524661,"uuid":"1891735","full_name":"regit/nf3d","owner":"regit","description":"Netfilter log visualisation tool","archived":false,"fork":false,"pushed_at":"2013-05-28T09:38:42.000Z","size":232,"stargazers_count":12,"open_issues_count":1,"forks_count":1,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-03-21T23:34:01.140Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/regit.png","metadata":{"files":{"readme":"README.rst","changelog":"Changelog","contributing":null,"funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2011-06-13T23:29:49.000Z","updated_at":"2024-04-11T07:25:33.000Z","dependencies_parsed_at":"2023-03-13T01:52:33.906Z","dependency_job_id":null,"html_url":"https://github.com/regit/nf3d","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/regit%2Fnf3d","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/regit%2Fnf3d/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/regit%2Fnf3d/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/regit%2Fnf3d/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/regit","download_url":"https://codeload.github.com/regit/nf3d/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":245670948,"owners_count":20653456,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-30T02:16:22.935Z","updated_at":"2025-03-26T14:32:21.580Z","avatar_url":"https://github.com/regit.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"====\nnf3d\n====\n\nIntroduction\n============\n\nnf3d is a Netfilter visualisation tool. It displays connections and logged \npackets in a GANTT diagram fashion.\n\nPrerequisites\n=============\n\nnf3d is currently using ulogd2 pgsql output to read information. You will\nthus need a working ulogd2 setup to be able to use this tool.\n\nUlogd2 needs to store the connection tracking entries into a Postgresql database.\nThis can  be done by activating the following stack in ulogd.conf ::\n\n\tstack=ct1:NFCT,ip2str1:IP2STR,pgsql2:PGSQL\n\nThe INSERT_OR_REPLACE_CT procedure is the most interesting here as you will have information\nabout the status of a connection (opened or close).\n\nFor recent kernel, if you want to have bytes information, you need to activate connection\naccounting. It can be done via ::\n\n\techo \"1\"\u003e /proc/sys/net/netfilter/nf_conntrack_acct\n\nInstallation\n============\n\nnf3d is using visual python and pygresql as well as other standard modules. You will need them\nto run this software.\nOn debian, you can install them by typing ::\n\n\taptitude install python-visual python-pygresql python-configobj python-setuptools\n\nThen go to nf3d directory and type ::\n\n\tpython ./setup.py install\n\tcp nf3d.conf /etc/nf3d.conf\n\nRunning it\n==========\n\nnf3d -h will return an usage message.\n\nTo display connections and logged packets over one hour period ::\n\n\tnf3d -D 3600\n\nKeyboard usage\n--------------\nGlobal\n~~~~~~\n \n * 'c': switch highlighted items to normal\n * 'l': toggle label fisplay on selected items\n * 'r': refresh current connection table\n * down arrow: highlight next item\n * up arrow: highlight prev item\n * 'w': dump information about highlighted object to stdout\n * '?': display help message\n\nSelection\n~~~~~~~~~\n\nClick on a selection to highlight it and you can now use selection feature. Pressing the\nfollowing key will highlight all connections matching filter:\n\n * 'd': original destination IP\n * 's': original source IP\n * 'p': original destination port\n * 'P': original source port\n\noriginal is referring to the existence of original and reply IP tuple in Netfilter conntrack.\n\nConnections lists handling\n~~~~~~~~~~~~~~~~~~~~~~~~~~\n\nYou can change the displayed time window with the following keys:\n\n * right arrow: move time window right\n * left arrow: move time window left\n\nYou can modify the displayed connections by using filter:\n\n * 'F': only display highlighted connections\n * 'R': reset filter and display all connections in the time window\n * 'O': order connections by last filter\n * ':': interactive filter, give a filter with syntax 'key=value'\n\nYou can also duplicate connections to be able to compare different time window or filter:\n\n * 'C': duplicate the selected table\n * 'D': delete the selected table\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fregit%2Fnf3d","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fregit%2Fnf3d","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fregit%2Fnf3d/lists"}