A modern web-based 3D network visualization tool that discovers and displays network devices and their connections in real-time using Three.js and React.
NetworkVisualizer3D is a comprehensive network analysis platform that combines advanced packet capture capabilities with intelligent device detection, security threat analysis, and 3D network visualization. Built with .NET 9.0 and leveraging industry-standard libraries like SharpPcap and PacketDotNet, it provides both real-time monitoring and historical analysis capabilities.
- ๐ Real-time Packet Capture - Advanced packet interception with multi-interface support
- ๐ค Intelligent Device Detection - Automatic classification using MAC OUI database and traffic patterns
- ๐ก๏ธ Security Analysis - Built-in threat detection for SQL injection, XSS, and suspicious traffic
- ๐ 3D Network Visualization - Interactive topology mapping with force-directed layouts
- โก High Performance - Optimized for high-throughput network environments
- ๐๏ธ Interactive Dashboard - Professional console interface with real-time statistics
| Requirement | Version | Notes |
|---|---|---|
| Windows | 10/11 | Administrator privileges required |
| .NET | 9.0+ | Download here |
| Npcap | Latest | Download here - WinPcap successor |
# 1. Clone the repository
git clone https://github.com/yourusername/NetworkVisualizer3D.git
cd NetworkVisualizer3D
# 2. Build the project
cd NetworkVisualizer3D.Core
dotnet restore
dotnet build
# 3. Run the application
dotnet run- Install Npcap - Download from npcap.com and install with "WinPcap API-compatible Mode" enabled
- Run as Administrator - Required for packet capture functionality
- Select Network Interface - Choose from available interfaces in the dashboard
Launch the application to access the professional dashboard interface:
dotnet run========================================
NetworkVisualizer3D Dashboard
========================================
--- Network Capture ---
1. Start Network Capture [Status: Stopped]
2. Stop Network Capture
3. Show Capture Statistics
4. List Network Interfaces
--- API Server ---
5. Start API Server [Status: Stopped]
6. Stop API Server
--- Data Analysis ---
7. Show Current Network Snapshot
8. Show Configuration
--- System ---
0. Exit
========================================
# List available network interfaces
dotnet run interfaces
# Start capture on specific interface
dotnet run capture "Wi-Fi"
# Show help
dotnet run help
# Demo mode (coming soon)
dotnet run demoNetworkVisualizer3D.Core/
โโโ ๐ Configuration/ # Application settings
โ โโโ AppSettings.cs # Comprehensive configuration model
โโโ ๐ Interfaces/ # Service contracts
โ โโโ INetworkCaptureService.cs
โ โโโ IApiService.cs
โ โโโ ILogger.cs
โโโ ๐ Models/ # Data models
โ โโโ NetworkModels.cs # Network entities & enums
โโโ ๐ Services/ # Core services
โ โโโ NetworkCaptureService.cs # Packet capture engine
โ โโโ ConsoleLogger.cs # Logging implementation
โโโ ๐ Utils/ # Utility classes
โ โโโ DeviceTypeDetector.cs # Device classification
โ โโโ PositionCalculator.cs # 3D positioning algorithms
โ โโโ HttpAnalyzer.cs # HTTP security analysis
โโโ Program.cs # Application entry point
โโโ appsettings.json # Configuration file
โโโ NetworkVisualizer3D.Core.csproj
- Real-time packet capture using SharpPcap
- Protocol analysis for TCP, UDP, ICMP, HTTP, DNS
- Device discovery and connection tracking
- Security threat detection with configurable rules
- MAC OUI database for vendor identification
- Traffic pattern analysis for device classification
- IP range detection for network topology mapping
- Security threat detection (SQL injection, XSS)
- Sensitive data exposure monitoring
- Suspicious user agent detection
- HTTP traffic analysis with payload inspection
- Force-directed layout algorithms
- Hierarchical positioning based on device types
- 3D coordinate calculation for network visualization
- Collision avoidance and optimal spacing
{
"NetworkCapture": {
"DefaultInterface": "",
"CaptureTimeoutMs": 30000,
"SnapshotIntervalMs": 5000,
"MaxPacketsPerSnapshot": 10000,
"EnableRealTimeCapture": true,
"SaveCaptureFiles": true,
"CaptureDirectory": "Captures",
"FilteredProtocols": ["TCP", "UDP", "ICMP"],
"EnableDeepPacketInspection": false,
"BufferSizeKB": 1024
}
}{
"Visualization": {
"OutputDirectory": "Visualizations",
"EnableRealTimeVisualization": true,
"MaxDevicesDisplayed": 100,
"MaxConnectionsDisplayed": 500,
"EnableAnimations": true,
"AnimationSpeedMultiplier": 1.0,
"EnableTrafficFlow": true,
"DefaultColorScheme": "Protocol",
"RefreshIntervalMs": 1000
}
}{
"Security": {
"RequireAdminPrivileges": true,
"EnableEncryption": false,
"EnableAuditLogging": true,
"TrustedNetworks": [
"192.168.0.0/16",
"10.0.0.0/8",
"172.16.0.0/12"
],
"EnableThreatDetection": false,
"MaxFailedAttempts": 5,
"LockoutDurationMinutes": 15
}
}Automatically identifies and classifies network devices:
| Device Type | Detection Method | Examples |
|---|---|---|
| Computers | MAC OUI + Traffic patterns | Desktops, Laptops |
| Servers | IP ranges + Port analysis | Web servers, Database servers |
| Network Equipment | Vendor identification | Routers, Switches, Access Points |
| IoT Devices | Traffic behavior | Smart home devices, Sensors |
| Mobile Devices | MAC patterns + User agents | Phones, Tablets |
| Printers | Protocol analysis | Network printers, Scanners |
Built-in threat detection capabilities:
- ** SQL Injection Detection** - Pattern matching for malicious SQL queries
- ** XSS Attack Prevention** - Cross-site scripting attempt identification
- ** Traffic Anomaly Detection** - Unusual traffic pattern analysis
- ** Suspicious User Agents** - Known attack tool identification
- ** Sensitive Data Exposure** - Credit cards, SSNs, API keys detection
- ** Unencrypted Communications** - Plain text sensitive data monitoring
Advanced positioning and layout algorithms:
- Force-Directed Layout - Physics-based node positioning
- Hierarchical Positioning - Device type-based layering
- Subnet-Based Clustering - IP range grouping
- Collision Avoidance - Optimal spacing algorithms
- Real-time Updates - Dynamic position recalculation
- Packets per second - Live capture rate monitoring
- Bytes transferred - Network throughput analysis
- Protocol distribution - Traffic composition breakdown
- Device count - Active device tracking
- Connection analysis - Active connection monitoring
- Security alerts - Threat detection summary
- Concurrent processing - Multi-threaded packet analysis
- Memory management - Efficient buffer handling
- Configurable limits - Adjustable performance parameters
- Background processing - Non-blocking capture operations
# Clone and build
git clone https://github.com/yourusername/NetworkVisualizer3D.git
cd NetworkVisualizer3D/NetworkVisualizer3D.Core
# Restore dependencies
dotnet restore
# Build project
dotnet build --configuration Release
# Run tests (when available)
dotnet test| Package | Version | Purpose |
|---|---|---|
| SharpPcap | Latest | Network packet capture |
| PacketDotNet | Latest | Packet parsing and analysis |
| Newtonsoft.Json | Latest | JSON serialization |
| Microsoft.Extensions.Configuration | Latest | Configuration management |
| Microsoft.Extensions.Configuration.Binder | Latest | Configuration binding |
โญ Star this project | ๐ Report Bug | ๐ก Request Feature