项目作者: sjsimps

项目描述 :
Track and visualize daily device access on a connected network
高级语言: Python
项目地址: git://github.com/sjsimps/MAC-Track.git
创建时间: 2017-08-22T16:28:59Z
项目社区:https://github.com/sjsimps/MAC-Track

开源协议:

下载


MAC Tracker

This tool may be used to track and visualize when various devices access your network.

Visualization

The visualization tool will output a device network access timeline.
The timeline displays each device’s MAC address on the vertical axis,
and the time from the beginning of the day til the end of the day on the horizontal axis.
Additionally, the visualizer downloads the most recent IEEE MAC OUI database,
and identifies the manufacturer of each device which has accessed the network.

How to run the visualizer:

  1. python mac_timeline.py [your Devices file]

Output:

The below image shows sample device usage on the connected network for a whole day:
alt_tag

The below table corresponds to the above image output, and displays the manufacturer
of each device attached on the network using the most recent IEEE OUI Database:

  1. MAC ADDRESS | MANUFACTURER
  2. ------------------|------------------------------------------------
  3. C8:69:CD:A9:37:D2 | Apple, Inc.
  4. C0:EE:FB:25:8C:A5 | OnePlus Tech (Shenzhen) Ltd
  5. C0:BD:D1:35:50:3E | SAMSUNG ELECTRO-MECHANICS(THAILAND)
  6. B0:34:95:E1:3D:5C | Apple, Inc.
  7. A4:5E:60:C6:74:5D | Apple, Inc.
  8. 94:EB:CD:49:1F:7B | BlackBerry RTS
  9. 90:FD:61:D0:E6:B5 | Apple, Inc.
  10. 7C:1E:52:4D:4C:D7 | Microsoft
  11. 78:FD:94:CF:B6:44 | Apple, Inc.
  12. 60:6C:66:58:36:21 | Intel Corporate
  13. 60:2A:D0:73:83:F1 | Cisco SPVTG
  14. 34:23:BA:6A:48:91 | SAMSUNG ELECTRO-MECHANICS(THAILAND)
  15. 2C:F0:A2:61:A9:2C | Apple, Inc.

Tracking

The tracker must be left running on a device that is actively connected to the network.
This will populate ‘Devices’ file with timing and access information,
which can be parsed and analyzed using the visualizer.

To run the tracker, use the following command:

  1. python mac_tracker.py [i=interface p=poll_rate]

Where the interface option may be used to switch the network interface used,
and poll rate determines how frequently the tracker polls the network.