Skip to main content

IP address space visualization (pcap, geofeed, MaxMind)

Project description

cider-cli

Cider-cli is a cli tool for producing CIDR maps, also known as "ip census maps", "ip maps", or "address space maps". These are very powerful graphs in your developer tool kit for understanding network traffic and visualizing address space in an organized fashion: example-map The goal is to solve and visualize complexities in address spaces, trends which may be clearer simply with a little color: example-grouped-map

Installation

Cider-cli is currently an unpublished tool, but for beta testing purposes you can install via:

Install latest:

pip install cider-cli

Development Installation

git clone https://github.com/lramos0/cider-cli
cd cider-cli
pip install -e .

🧭 How to Use?

You can produce CIDR maps on an input, see supported data sources, using:

cider {input} --kind {geofeed|maxmind|pcap|cider} [options]

📁 Supported Data Sources

1. Formatted CSV (geofeeds, script outputs, etc)

CSV files with lines of the form:

ip_prefix,cc,region,city,...

Run:

cider ripe.csv --kind geofeed -o ripe_map.html

2. MaxMind CSV Snapshot Folder

The input must be the directory containing:

GeoLite2-City-Blocks-IPv4.csv GeoLite2-City-Locations-en.csv

Run:

cider GeoLite2-City-CSV_20250902 --kind maxmind -o maxmind_map.html

3. Packet Capture (.pcap)

You can generate a quick pcap of outbound traffic:

sudo tcpdump -i en0 -w capture.pcap 'tcp[tcpflags] & tcp-syn != 0'

Visualize it:

ipmap map capture.pcap --kind pcap -o pcap_map.html

🎨 Visualization Options

Currently, the formats allow for the following options (default is html output). This can be set with the output tag:

--output result.html
--output result.png --output-format png

📊 Example: Full Command

cider ripe.20250903.geo.csv \
--kind geofeed \
--view /16 \
--mode primary \
--colorscale default \
--output ripe_map.html

🏁 Output

Every visualization is an interactive Plotly map with:

  1. Clickable mode toggles

  2. Primary org / country count / prefix count views

  3. Responsive scaling

  4. Exportable HTML or PNG

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cider_cli-0.1.3.tar.gz (21.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cider_cli-0.1.3-py3-none-any.whl (28.5 kB view details)

Uploaded Python 3

File details

Details for the file cider_cli-0.1.3.tar.gz.

File metadata

  • Download URL: cider_cli-0.1.3.tar.gz
  • Upload date:
  • Size: 21.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for cider_cli-0.1.3.tar.gz
Algorithm Hash digest
SHA256 57958fd66d6f50152e6376de9697ba4b5d4317baa42c5fb57204996aba3cc349
MD5 b2ab6b8ae20f173fcf5d861963590111
BLAKE2b-256 789f2a12bbc94edb42a0f39ae3a2cfad6bdf4760cb1bfdcc1b4076498f315955

See more details on using hashes here.

Provenance

The following attestation bundles were made for cider_cli-0.1.3.tar.gz:

Publisher: publish-pypi.yaml on lramos0/cider-cli

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cider_cli-0.1.3-py3-none-any.whl.

File metadata

  • Download URL: cider_cli-0.1.3-py3-none-any.whl
  • Upload date:
  • Size: 28.5 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for cider_cli-0.1.3-py3-none-any.whl
Algorithm Hash digest
SHA256 b419f3245daea74cb74df3d717de22fb1b6cf5c4a646d00dc63cb705eb74cc03
MD5 8139b3d999c139f38864ee0531ad2520
BLAKE2b-256 bd21b8ff92403dd58b5b781153d4c9b7b702ce39941009c71ce7faf5b67710e3

See more details on using hashes here.

Provenance

The following attestation bundles were made for cider_cli-0.1.3-py3-none-any.whl:

Publisher: publish-pypi.yaml on lramos0/cider-cli

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page