Skip to main content

IP address space visualization (pcap, geofeed, MaxMind)

Project description

cider-cli

Cider-cli is a cli tool for producing CIDR maps, also known as "ip census maps", "ip maps", or "address space maps". These are very powerful graphs in your developer tool kit for understanding network traffic and visualizing address space in an organized fashion: example-map The goal is to solve and visualize complexities in address spaces, trends which may be clearer simply with a little color: example-grouped-map

Installation

Cider-cli is currently an unpublished tool, but for beta testing purposes you can install via:

Install latest:

pip install git+https://github.com/lramos0/cider-cli.git

Development Installation

git clone https://github.com/lramos0/cider-cli
cd cider-cli
pip install -e .

🧭 How to Use?

You can produce CIDR maps on an input, see supported data sources, using:

ipmap {input} --kind {geofeed|maxmind|pcap} [options]

📁 Supported Data Sources

1. Formatted CSV (geofeeds, script outputs, etc)

CSV files with lines of the form:

ip_prefix,cc,region,city,...

Run:

ipmap ripe.csv --kind geofeed -o ripe_map.html

2. MaxMind CSV Snapshot Folder

The input must be the directory containing:

GeoLite2-City-Blocks-IPv4.csv GeoLite2-City-Locations-en.csv

Run:

ipmap GeoLite2-City-CSV_20250902 --kind maxmind -o maxmind_map.html

3. Packet Capture (.pcap)

You can generate a quick pcap of outbound traffic:

sudo tcpdump -i en0 -w capture.pcap 'tcp[tcpflags] & tcp-syn != 0'

Visualize it:

ipmap map capture.pcap --kind pcap -o pcap_map.html

🎨 Visualization Options

Currently, the formats allow for the following options (default is html output). This can be set with the output tag:

--output result.html
--output result.png --output-format png

📊 Example: Full Command

ipmap ripe.20250903.geo.csv \
--kind geofeed \
--view /16 \
--mode primary \
--colorscale default \
--output ripe_map.html

🏁 Output

Every visualization is an interactive Plotly map with:

  1. Clickable mode toggles

  2. Primary org / country count / prefix count views

  3. Responsive scaling

  4. Exportable HTML or PNG

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cider_cli-0.1.1.tar.gz (20.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cider_cli-0.1.1-py3-none-any.whl (26.3 kB view details)

Uploaded Python 3

File details

Details for the file cider_cli-0.1.1.tar.gz.

File metadata

  • Download URL: cider_cli-0.1.1.tar.gz
  • Upload date:
  • Size: 20.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for cider_cli-0.1.1.tar.gz
Algorithm Hash digest
SHA256 d527ace70b2614f188687d596bf96f22c10022ce4fe4824026f1c7d3eda44994
MD5 dab50dc688238bcb87f993687a8ffdcf
BLAKE2b-256 f8311070fa5b1229afcbede6467587913ee0b083073ec0154a97659c1f9c7e1e

See more details on using hashes here.

Provenance

The following attestation bundles were made for cider_cli-0.1.1.tar.gz:

Publisher: publish-pypi.yaml on lramos0/cider-cli

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cider_cli-0.1.1-py3-none-any.whl.

File metadata

  • Download URL: cider_cli-0.1.1-py3-none-any.whl
  • Upload date:
  • Size: 26.3 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for cider_cli-0.1.1-py3-none-any.whl
Algorithm Hash digest
SHA256 4955d10aa200547720e8874c191457000727c8fe2f456a00f97b38363b4f3bdb
MD5 99c68927737aa76a8248eec824196333
BLAKE2b-256 4e2e2b02645ab00107911f1277dc5002483ebc3bd071283c72605cf141b1d3c1

See more details on using hashes here.

Provenance

The following attestation bundles were made for cider_cli-0.1.1-py3-none-any.whl:

Publisher: publish-pypi.yaml on lramos0/cider-cli

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page