SharkScope
Real-time network traffic visualization. See your connections flow across a 2D world map or 3D globe as they happen.
Features
- Real-time visualization - Watch network traffic flow on a 2D world map or 3D globe
- Geographic mapping - See where your connections are going with automatic IP geolocation
- Process detection - Know which apps are making each connection (macOS/Linux)
- Packet recording - Record traffic to pcap files for analysis in Wireshark
- Auto-updating GeoIP - Database downloads automatically, no account required
- Dark mode UI - Clean interface with real-time animations
Requirements
- Python 3.9+
- Wireshark/tshark - For packet capture
Installation
pip install sharkscope
Install Wireshark
SharkScope uses tshark (Wireshark's command-line tool) for packet capture.
macOS:
brew install --cask wireshark
Ubuntu/Debian:
sudo apt install tshark
Windows: Download from wireshark.org
Usage
# Start SharkScope (opens browser automatically)
sharkscope
# Specify port
sharkscope --port 9090
# Don't open browser
sharkscope --no-browser
# Update GeoIP database
sharkscope --update-geoip
# Run in demo mode (no tshark required)
sharkscope --demo
The GeoIP database downloads automatically on first run. Use --update-geoip to refresh it.
Command Line Options
| Option | Description |
|---|---|
-p, --port PORT |
Port to run on (default: 5762) |
--host HOST |
Host to bind to (default: 127.0.0.1) |
--no-browser |
Don't auto-open browser |
--no-geoip |
Run without geographic mapping |
--update-geoip |
Download/update GeoIP database |
--demo |
Demo mode with simulated data |
-v, --version |
Show version |
How It Works
- Packet Capture - Uses tshark to capture network packets
- GeoIP Lookup - Maps IP addresses to geographic locations using GeoLite2
- Process Detection - Uses lsof to identify which applications own connections
- Visualization - Renders connections on an interactive 3D globe or 2D map
License
MIT License - see LICENSE for details.
Acknowledgments
- Wireshark - Network protocol analyzer
- MaxMind GeoLite2 - IP geolocation database
- Three.js - 3D globe visualization
1 maintainer
Metadata
1 maintainer
Release files for sharkscope 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| sharkscope-0.1.0.tar.gz | 14.3 kB | Without provenance | Details for sharkscope-0.1.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| sharkscope-0.1.0-py3-none-any.whl | Python 3 | none | any | Details for sharkscope-0.1.0-py3-none-any.whl |
Total release size: 250.3 kB
Security for sharkscope 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
