How kvvvvvvvvv/nta works
NTA is a full-stack live network-monitoring application. A user selects an interface and starts capture; the Flask backend sniffs and analyzes packets, checks for anomalies and threats, then streams updates for dashboard visualization. Users can also inspect network and threat-intelligence analytics and export capture sessions. The README documents feature extraction, SQLite/session logging, and replay/export; sampled backend excerpts are partial, so finer internal call wiring is not asserted.
Main entry points: CyberDashboard.jsx Cyber dashboard · app.py Packet capture · App.jsx Application shell · ThreatIntelligence.jsx Threat intelligence
Components 19
Capture and Analysis
- Packet capture
backend/app.py - Packet analysis
backend/app.py - Anomaly detection
backend/app.py
Network Intelligence
- Threat checks
backend/app.py - Network analytics
backend/app.py
Backend Services
- Live updates
backend/app.py - Session records
backend/app.py
Dashboard
- Application shell
frontend/src/App.jsx - Cyber dashboard
frontend/src/components/CyberDashboard.jsx - Session controls
frontend/src/components/SessionCapture.jsx - Live traffic
frontend/src/components/LiveTrafficTable.jsx - Traffic charts
frontend/src/components/CyberCharts.jsx - Anomaly view
frontend/src/components/AnomalyDetection.jsx - Threat intelligence
frontend/src/components/ThreatIntelligence.jsx - Flagged IPs
frontend/src/components/FlaggedIPs.jsx - Masked IPs
frontend/src/components/PrivacyMaskedIPs.jsx
Other components
- Network operator
- Scapy packet source
- AbuseIPDB
Connections 22
- Network operator → Application shell: uses
- Application shell → Cyber dashboard: renders
- Application shell → Packet capture: starts capture
- Packet capture → Scapy packet source: sniffs packets
- Packet capture → Packet analysis: passes packets
- Packet analysis → Anomaly detection: classifies traffic
- Packet analysis → Threat checks: checks IPs
- Threat checks → AbuseIPDB: queries
- Packet capture → Session records: records session
- Packet analysis → Network analytics: supports analysis
- Anomaly detection → Live updates: publishes alerts
- Network analytics → Live updates: publishes updates
- Live updates → Cyber dashboard: streams updates
- Cyber dashboard → Live traffic: shows traffic
- Cyber dashboard → Traffic charts: renders insights
- Cyber dashboard → Anomaly view: shows alerts
- Cyber dashboard → Threat intelligence: opens intelligence
- Threat intelligence → Flagged IPs: renders flagged IPs
- Threat intelligence → Masked IPs: renders masked IPs
- Session controls → Packet capture: stops capture
- Session controls → Session records: requests export
- Application shell → Packet capture: loads interfaces