Skip to main content

IP address space visualization (pcap, geofeed, MaxMind)

Project description

cider-cli

Cider-cli is a cli tool for producing CIDR maps, also known as "ip census maps", "ip maps", or "address space maps". These are very powerful graphs in your developer tool kit for understanding network traffic and visualizing address space in an organized fashion: example-map The goal is to solve and visualize complexities in address spaces, trends which may be clearer simply with a little color: example-grouped-map

Installation

Cider-cli is currently an unpublished tool, but for beta testing purposes you can install via:

Install latest:

pip install git+https://github.com/lramos0/cider-cli.git

Development Installation

git clone https://github.com/lramos0/cider-cli
cd cider-cli
pip install -e .

🧭 How to Use?

You can produce CIDR maps on an input, see supported data sources, using:

ipmap {input} --kind {geofeed|maxmind|pcap} [options]

📁 Supported Data Sources

1. Formatted CSV (geofeeds, script outputs, etc)

CSV files with lines of the form:

ip_prefix,cc,region,city,...

Run:

ipmap ripe.csv --kind geofeed -o ripe_map.html

2. MaxMind CSV Snapshot Folder

The input must be the directory containing:

GeoLite2-City-Blocks-IPv4.csv GeoLite2-City-Locations-en.csv

Run:

ipmap GeoLite2-City-CSV_20250902 --kind maxmind -o maxmind_map.html

3. Packet Capture (.pcap)

You can generate a quick pcap of outbound traffic:

sudo tcpdump -i en0 -w capture.pcap 'tcp[tcpflags] & tcp-syn != 0'

Visualize it:

ipmap map capture.pcap --kind pcap -o pcap_map.html

🎨 Visualization Options

Currently, the formats allow for the following options (default is html output). This can be set with the output tag:

--output result.html
--output result.png --output-format png

📊 Example: Full Command

ipmap ripe.20250903.geo.csv \
--kind geofeed \
--view /16 \
--mode primary \
--colorscale default \
--output ripe_map.html

🏁 Output

Every visualization is an interactive Plotly map with:

  1. Clickable mode toggles

  2. Primary org / country count / prefix count views

  3. Responsive scaling

  4. Exportable HTML or PNG

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cider_cli-0.1.2.tar.gz (20.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cider_cli-0.1.2-py3-none-any.whl (26.3 kB view details)

Uploaded Python 3

File details

Details for the file cider_cli-0.1.2.tar.gz.

File metadata

  • Download URL: cider_cli-0.1.2.tar.gz
  • Upload date:
  • Size: 20.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for cider_cli-0.1.2.tar.gz
Algorithm Hash digest
SHA256 241831c6d2a0b918d556515ea07ac591d817891365f75f73ca180fbfcb3dd420
MD5 512f0f66efaa4b6a3960d9b9387d476a
BLAKE2b-256 d1040cd1d3c701f8a60b41707590a836e8fdde05260c3bb269b695e62bf32137

See more details on using hashes here.

Provenance

The following attestation bundles were made for cider_cli-0.1.2.tar.gz:

Publisher: publish-pypi.yaml on lramos0/cider-cli

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cider_cli-0.1.2-py3-none-any.whl.

File metadata

  • Download URL: cider_cli-0.1.2-py3-none-any.whl
  • Upload date:
  • Size: 26.3 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for cider_cli-0.1.2-py3-none-any.whl
Algorithm Hash digest
SHA256 beaa6c75668314690692ea3ebed4c33c903384c8879006afaea937ee1311e483
MD5 c520544ad32a6114a722e00a8800a6d6
BLAKE2b-256 aea4683bd2c071115825dc88e978a43cd0de5e7793ed2de54e09fb0800ff913b

See more details on using hashes here.

Provenance

The following attestation bundles were made for cider_cli-0.1.2-py3-none-any.whl:

Publisher: publish-pypi.yaml on lramos0/cider-cli

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page