Desarrollo de un tablero de control para análisis de tráfico en una red local

Abstract

The administration of a local area network (LAN) is a hard work which is hardened by the number of active devices, media, protocols, different topologies, mix of signals, and so on. Dashboards allow to obtain information graphically about events that saturate the bandwidth of the transmission medium of a LAN. The objective of this work is the development of an application to detect network traffic, using the protocols IP, TCP, UDP and DNS implementation to detect the consumption of bandwidth of the transmission medium in order to generate alerts if the permitted limits are exceeded. LAN traffic analysis is performed based on the information obtained by the packet sniffer. The “sniffing” method proposed is man in the middle (MITM), where the capture rate is the same of the transmission medium. The traffic analysis information is stored in a database, which will be displayed by the dashboard. The dashboard architecture is composed by three main modules: 1) a data acquisition module that is responsible for collecting, analyzing and processing the packets over transmission medium, without affecting the process of sending and receiving data using a packet sniffer, 2) a database that stores information produced by the data acquisition module, and 3) a graphical interface that shows the behavior of the consumption of bandwidth, the number of packets input, output, errors, the active devices on the network. Also allows the edition of devices on the network and the setup of alarms and report generation.