This workflow calculates and visualizes connection statistics of IP addresses in a computer network. The package data of a small network was captured using Wireshark and exported as csv. The IP addresses were anonymized and enriched by assigning geo location data, such as latitude, longitude, city, country, and country flags to the IP addresses. This can be done using free, public services, such as freegeoip.net. The workflow calculates and visualizes the top N most frequent destination ports, IPs, and assigned countries for each IP address. Additionally, the geo locations of the destination IPs will be marked in an open street map visualization. The IP addresses to include in the analysis as well as the number N can be selected in the configuration dialog of the "Source IP Selection" component. The results of the analysis are shown in a report.
Workflow
Network Traffic (PCAP) Reporting
Used extensions & nodes
Created with KNIME Analytics Platform version 4.1.0
- Go to item
- Go to item
- Go to item
- Go to item
- Go to item
- Go to item
Loading deployments
Loading ad hoc jobs
Legal
By using or downloading the workflow, you agree to our terms and conditions.